信息物理融合系统综合安全威胁与防御研究

摘要

信息物理融合系统 (Cyber-physical system, CPS) 是计算单元与物理对象在网络空间中高度集成交互形成的智能系统.信息系统与物理系统的融合在提升系统性能的同时, 信息系统的信息安全威胁 (Security) 与物理系统的工程安全问题 (Safety) 相互影响, 产生了新的综合安全问题, 引入严重的安全隐患.本文介绍了CPS的概念与安全现状, 给出了CPS综合安全的定义;在对现有安全事件进行分析的基础上, 提出了CPS的综合安全威胁模型;从时间关联性和空间关联性的角度, 对现有CPS攻击和防御方法进行了分类和总结, 并探讨CPS综合安全的研究方向.%Cyber-physical system (CPS) is an intelligent system consisting of computing units and physical objects that highly interact with each other through the network. The combination of cyber system and physical system is promoting the performance of the CPS. At the same time, it also introduces a new integrated security threat into CPS, which combines engineering safety threat of physical system and information security threat of cyber system. In this paper, concepts and security status of CPS are introduced, and the concept of CPS integrated security is defined. After analyzing several existing security accidents in CPS, a new threat model of CPS integrated security is proposed. Existing CPS attacks and defense methods are classified and summarized from a perspective of temporal and spatial correlation. The future research of CPS integrated security is discussed.