文献类型：期刊文献

中文题名：工业控制系统信息安全风险评估量化研究

英文题名：Quantitative Research on Risk Assessment for Information Security of Industrial Control System

作者：卢慧康[1];陈冬青[2];彭勇[2];王华忠[1]

机构：[1]华东理工大学信息科学与工程学院,上海200237;[2]中国信息安全测评中心,北京100085

年份：2014

卷号：35

期号：10

起止页码：21

中文期刊名：自动化仪表

外文期刊名：Process Automation Instrumentation

收录：CSTPCD;;北大核心:【北大核心2011】；

语种：中文

中文关键词：层次分析法;信息安全;工业控制系统;风险评估;风险分析

外文关键词：Analytic hierarchy process（AHP） Information security Industrial control system（ ICS} Risk assessment Risk analysis

摘要：为解决工控系统的信息安全风险量化评估问题,提出了基于模糊层次分析法的工业控制系统信息安全风险评估方法。结合工控系统特点,构造了层次结构模型,引入了模糊一致矩阵计算各要素相对重要性权值,克服了层次分析法需多次进行一次性检验问题;自下而上对工控系统风险进行模糊综合评判,并将评判结果反模糊化,得出了风险的精确值。实例表明,该方法能合理有效地量化控制系统风险,为工业控制系统风险管理决策提供了依据。
To solve the issue of quantitative risk assessment of information security of industrial control system, the risk assessment method forinformation security of industrial control system based on fuzzy analytic hierarchy process （ AHP ） is proposed. In accordance with thecharacteristics of the industrial control system, the hierarchical structure model is constructed, and the fuzzy consistent matrix is introduced tocalculate the relative important weights of each key element ; thus the problem that AHP needs check consistency for many times is overcome ;fuzzy comprehensive evaluation for the risk of industrial control system can be carried out from bottom to top, and the defuzzification ofevaluation result is conducted to obtain accurate risk value. The practical example indicates that the method reasonably and effectivelyquantified the risk of industrial control system（ ICS）, and it provides scientific basis for industrial control system risk management decisions.