Algorithm for building a cyberphysical system operator profile for adaptive authentication

摘要

Modern control systems designed to automate the control of process equipment in industrial plants require the provision of serious security mechanisms and functions. The COVID-19 pandemic in 2020 has highlighted the urgent need to implement remote access for operators of such enterprises, including access to some interfaces of industrial systems. Current information security challenges require modernization of the defense-in-depth of such facilities, including protection against compromising credentials by developing new solutions in the field of authentication of system subjects. This paper proposes a method for forming a profile of access subject authentication allowing differentiated development of adaptive algorithms to verify the legitimacy of operations. This eliminates the disadvantages of existing traditional authentication methods based on the use of explicit verification methods associated with the fact that in order to establish the authenticity of the user are used identifying characteristics that can be compromised by attackers. The paper presents the results of comparing the information content of different attributes when forming a subject access profile. The experiments confirmed the successful application of the proposed approach for different groups of access subjects and cyberphysical systems.