|
科研成果 |
|
|
|
论文题目: |
Content-based deep communication control for networked control system |
第一作者: |
Wan M(万明);Shang WL(尚文利);Kong LH(孔令和);Zeng P(曾鹏) |
参与作者: |
|
联系作者: |
|
发表刊物: |
Telecommunication Systems |
发表年度: |
2017 |
卷,期,页: |
65,1,155-168 |
论文出处: |
|
第一作者所在部门: |
|
论文编号: |
|
论文摘要: |
In smart cities, the networked control system plays a significant role in transportation systems, power stations or other critical infrastructures, and it is facing many security issues. From this point, this paper proposes a content-based deep communication control approach to guarantee its security. Based on the layer architecture, this approach analyzes the interactive content in depth according to different industrial communication protocols, and implements the access control between two distinct enclaves. For OPC Classic, we acquire the dynamic port provided by OPC server, and open a new connection belonging to this port; for Modbus/TCP, we not only analyze the ordinary function codes and addresses, but also check the register or coil values by using the multi-bit Trie-tree matching algorithm. Besides, the white-listing strategy is introduced to satisfy the special requirements of industrial communication. Our experiment results show that, on the one hand the proposed approach provides OPC and Modbus/TCP defenses in depth; on the other hand it has less than 1 ms forwarding latency and 0 packet loss rate when the rule number reaches 200, and all these meet the availability requirements in the networked control system. In particular, this approach has been successfully applied in several real-world petrochemical control systems. |
论文全文: |
|
其他备注: |
|
附件下载: |
|
|
|