{"title":"基于层次威胁分析模型框架的风电场工业控制系统网络安全分析","authors":"Baihua Yang, Yue Zhang","doi":"10.1109/CCPQT56151.2022.00008","DOIUrl":null,"url":null,"abstract":"Cybersecurity threat identification and analysis of wind farm industrial control systems (ICS-WF) is an important part of security work. The article innovatively proposes the STRIDE threat model as the basic structure to establish a framework of information system cybersecurity hierarchical threat analysis model for identifying and analyzing cyber security threats to ICS-WF. The framework model system covers three levels and six dimensions. The three levels refer to the Data Stream Layer, Context Layer, and Component Layer, which correspond to three parts of System Devices, Trust Boundary, and Application Process respectively; the six dimensions refer to six dimensions of Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service and Elevation of Privilege. Through this model framework for system analysis in a typical wind farm industrial control network environment, not only can we accurately identify and analyze cybersecurity threats, but also provide an effective basis for threat abatement and system design through the visualization of threats.","PeriodicalId":235893,"journal":{"name":"2022 International Conference on Computing, Communication, Perception and Quantum Technology (CCPQT)","volume":"46 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2022-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Cybersecurity Analysis of Wind Farm Industrial Control System Based on Hierarchical Threat Analysis Model Framework\",\"authors\":\"Baihua Yang, Yue Zhang\",\"doi\":\"10.1109/CCPQT56151.2022.00008\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Cybersecurity threat identification and analysis of wind farm industrial control systems (ICS-WF) is an important part of security work. The article innovatively proposes the STRIDE threat model as the basic structure to establish a framework of information system cybersecurity hierarchical threat analysis model for identifying and analyzing cyber security threats to ICS-WF. The framework model system covers three levels and six dimensions. The three levels refer to the Data Stream Layer, Context Layer, and Component Layer, which correspond to three parts of System Devices, Trust Boundary, and Application Process respectively; the six dimensions refer to six dimensions of Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service and Elevation of Privilege. Through this model framework for system analysis in a typical wind farm industrial control network environment, not only can we accurately identify and analyze cybersecurity threats, but also provide an effective basis for threat abatement and system design through the visualization of threats.\",\"PeriodicalId\":235893,\"journal\":{\"name\":\"2022 International Conference on Computing, Communication, Perception and Quantum Technology (CCPQT)\",\"volume\":\"46 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2022-08-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2022 International Conference on Computing, Communication, Perception and Quantum Technology (CCPQT)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/CCPQT56151.2022.00008\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2022 International Conference on Computing, Communication, Perception and Quantum Technology (CCPQT)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CCPQT56151.2022.00008","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Cybersecurity Analysis of Wind Farm Industrial Control System Based on Hierarchical Threat Analysis Model Framework
Cybersecurity threat identification and analysis of wind farm industrial control systems (ICS-WF) is an important part of security work. The article innovatively proposes the STRIDE threat model as the basic structure to establish a framework of information system cybersecurity hierarchical threat analysis model for identifying and analyzing cyber security threats to ICS-WF. The framework model system covers three levels and six dimensions. The three levels refer to the Data Stream Layer, Context Layer, and Component Layer, which correspond to three parts of System Devices, Trust Boundary, and Application Process respectively; the six dimensions refer to six dimensions of Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service and Elevation of Privilege. Through this model framework for system analysis in a typical wind farm industrial control network environment, not only can we accurately identify and analyze cybersecurity threats, but also provide an effective basis for threat abatement and system design through the visualization of threats.