Abstract:Industrial control terminals play an important role in industrial control scenarios. Due to the special nature of industrial control networks, industrial control terminal systems are vulnerable to malicious attacks, which can greatly threaten the stability and security of industrial production environments. Traditional security protection methods for industrial control terminals have coarse detection granularity, and are unable to effectively detect and prevent attacks, lacking real-time responsiveness to attack events. Therefore, this paper proposes a real-time dynamic credibility evaluation mechanism based on program behavior, which integrates the matching and symmetry ideas of credibility evaluation. By conducting a real-time dynamic credibility evaluation of function call sequences and system call sequences during program execution, the credibility of industrial control terminal application program behavior can be judged. To solve the problem that the system calls generated during program execution are unstable and difficult to measure, this paper proposes a partition-based dynamic credibility evaluation method, dividing program behavior during runtime into function call behavior and system call behavior within function intervals. For function call behavior, a sliding window-based function call sequence benchmark library construction method is proposed, which matches and evaluates real-time measurement results based on the benchmark library, thereby achieving symmetry between the benchmark library and the measured data. For system call behavior, a maximum entropy system call model is constructed, which is used to evaluate the credibility of system call sequences. Experiment results demonstrate that our method performs better in both detection success rate and detection speed compared to the existing methods.

Availability Evaluation Method and Implementation Framework of Multilevel Secuerity Systems with Credibility Characteristics

Availability Analysis Method of Multilevel Security Models with Credibility Characteristics

A Multilevel Security Model with Credibility Characteristics

Dynamically modified union model combining confidentiality and integrity

Credibility Attestation of Property Remote Attestation Method

Action risk analysis for multilevel security model with credibility characteristics

Improving credibility of systems integrity measurement of property remote attestation

Dynamic Security Access Control Model Based on System Reliability

Implementation and Performance Analysis of Multilevel Security System in Pervasive Computing Environment

Fuzzy Multi-Level Security: An Experiment on Quantified Risk-Adaptive Access Control

Program Behavior Dynamic Trust Measurement and Evaluation Based on Data Analysis

Trust Degree Based Multilevel Security Policy and Its Model of State Machine

Credibility Protection for Resource Sharing and Collaborating in Non-Center Network Computing Environments

Study on the Credibility Quantification of Large Complex Simulation Systems

Reliable Services and Services Recommendation: A Detecting Model

Research on Credibility Quantification of Complex Simulation Systems

A Multilevel Security Model Based on Communication Channel Capacity

Research Progress on Credibility Assessment of a Complex Simulation System

Credibility evaluation of simulation for trusted network connection

A General Formal Framework of Analyzing Selective Disclosure Attribute-Based Credential Systems.

Catch Me if You Can: A Secure Bilateral Access Control System with Anonymous Credentials