Coordination of Functional Safety and Information Security for Intelligent Instrument Based on Fuzzy Multi-objective Decision

doi:10.3969/j.issn.1671-1122.2021.07.002

Abstract

Abstract:

Aiming at the typical functional modules and security requirements of instruments, this paper designs a coordination framework that eliminate strategy overlap and resolve strategy conflicts. Based on the framework, the attributes of the security strategy are extracted and the formal modeling is completed. Then, this paper strikes a balance among security protection capabilities, risk mitigation degrees, instrument resource constraints and various factors comprehensively, and considers the difference of fuzzy preference of network communication security strategy and control behavior security strategy in the strategy integration process. Furthermore, the optimal deployment plan of security protection strategy is drawn. Finally, simulation experiments verify the feasibility and effectiveness of the proposed approach. In this paper, through a combination of fuzzy multi-objective decision-making and priority selection, the integration process of functional safety strategy and information security strategy for intelligent instrument is realized.

Key words: functional safety, information security, multi-objective decision making, intelligent instrument

CLC Number:

TP309

HU Bowen, ZHOU Chunjie, LIU Lu. Coordination of Functional Safety and Information Security for Intelligent Instrument Based on Fuzzy Multi-objective Decision[J]. Netinfo Security, 2021, 21(7): 10-16.

Figures/Tables 7

References 11

[1]	SHI Xueling, FENG Xiaosheng. The Progress and Trend of Functional Safety Technology of Instrumentation[C]// Chinese Association of Automation. 2007 Annual Conference on Automation and Instrumentation, November 1, 2007, Chongqing China. Chengdu: Sichuan University, 2008: 25-29.
	史学玲, 冯晓升. 仪器仪表功能安全技术的进展与趋势[C]// 中国自动化学会, 2007西南三省一市自动化与仪器仪表学术年会, 2007-11-01,重庆,中国.成都:四川大学, 2008:25-29.
[2]	IEC 61508-2010 Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems[S]. Geneva: International Electrotechnical Commission, 2010.
[3]	LAN Kun, TANG Lin. Analysis of Information Security System for Intelligent Manufacturing[J]. Communications Technology, 2016, 49(4):469-474.
	兰昆, 唐林. 智能制造信息安全保障体系分析[J]. 通信技术, 2016, 49(4):469-474.
[4]	ZHANG Qi, LI Xuan, ZHOU Chunjie, et al. Risk-based Task Scheduling Approach for Integrated Control of System Safety and Cyber Security in Industrial Control Systems[C]// IET, 10th IET System Safety and Cyber-security Conference 2015, October 21-22, 2015, Bristol, UK. IET, 2016: 1-6.
[5]	ANDERSON S, FELICI M. Safety, Reliability and Security of Industrial Computer Systems[J]. Reliability Engineering & System Safety, 2004, 89(1):1-5. doi: 10.1016/j.ress.2004.08.002 URL
[6]	IEC 62859-2016 Nuclear Power Plants-instrumentation and Control Systems-requirements for Coordinating Safety and Cybersecurity[S]. Geneva: International Electrotechnical Commission, 2016.
[7]	DULAY N, LUPU E, SLOMAN M, et al. A Policy Deployment Model for the Ponder Language[C]// Integrated Network Management Proceedings, 2001 IEEE/IFIP International Symposium on IEEE, May 14-18, 2001, Seattle, WA, USA. New York: IEEE, 2001: 529-543.
[8]	SHAFIQ B, JOSHI J, BERTINO E, et al. Secure Interoperation in a Multidomain Environment Employing RBAC Policies[J]. IEEE Transactions on Knowledge & Data Engineering, 2005, 17(11):1557-1577.
[9]	JIN Jianghong, MO Changyu, LI Gang. Integration Technology of Functional Safety and Cyber Security for Industrial Control System[J]. Industrial Safety and Environmental Protection, 2020, 46(1):53-60.
	靳江红, 莫昌瑜, 李刚. 工业控制系统功能安全与信息安全一体化防护措施研究[J]. 工业安全与环保, 2020, 46(1):53-60.
[10]	HO Si, YANG Jiaqiang, YANG Shiyou, et al. Integration of Directed Searches in Particle Swarm Optimization for Multi-objective Optimization[J]. IEEE Transactions on Magnetics, 2015, 51(3):1-4.
[11]	KENNEDY J, EBERHART R. Particle Swarm Optimization[C]// IEEE, Icnn95-international Conference on Neural Networks. November 27-December 1, 1995, Perth, Australia. New York: IEEE, 1995: 1942-1948.

策略类型	具体策略描述	安全防护能力	风险缓解程度	计算资源消耗	存储资源消耗
信息安全策略	S₁：添加通信序列号	1	1	2	1
	S₂：添加通信时间戳	2	1	2	2
	S₃：数据完整性验证	2	2	3	3
	S₄：加密传输	4	3	5	3
	S₅：访问控制	4	5	2	4
	S₆：通信冗余备份设计	5	3	4	5
功能安全策略	S₇：故障自诊断与报警	5	4	5	4
功能安全策略	S₈：过程状态监视	3	1	3	4

序号	具体策略描述								安全防护能力	风险缓解程度	计算资源消耗	存储资源消耗
序号	S₁	S₂	S₃	S₄	S₅	S₆	S₇	S₈	安全防护能力	风险缓解程度	计算资源消耗	存储资源消耗
P₁	√	√	—	√	√	√	—	—	16	13	15	15
P₂	—	√	—	—	—	√	√	—	12	8	11	11
P₃	—	—	—	√	√	—	√	—	13	12	12	11
P₄	—	—	—	—	√	—	√	√	12	10	10	12
P₅	√	—	—	—	—	√	√	—	11	8	11	10
P₆	—	√	—	√	√	√	—	—	15	12	13	14
P₇	—	—	√	√	√	—	√	—	15	14	15	14
P₈	√	—	—	—	√	—	√	—	10	10	9	9
P₉	—	—	√	√	√	√	—	—	15	13	14	15

[1]	ZHANG Minqing, ZHOU Neng, LIU Mengmeng, KE Yan. Research on Reversible Data Hiding Technology in Homomorphic Encrypted Domain [J]. Netinfo Security, 2020, 20(8): 25-36.
[2]	Yihua ZHOU, Zhuqing LV, Yuguang YANG, Weimin SHI. Data Deposit Management System Based on Blockchain Technology [J]. Netinfo Security, 2019, 19(8): 8-14.
[3]	Lin LI, Xuxia ZHANG. National Secret Substitution of zk-snark Bilinear Pair [J]. Netinfo Security, 2019, 19(10): 10-15.
[4]	Yan CHEN, Jianyong GE, Jing LAI, Zhen LU. Security System of the Information System in the Cloud [J]. Netinfo Security, 2018, 18(4): 79-86.
[5]	Congdong LV, Zhen HAN. A Security Model of Cloud Computing Based on IP Model [J]. Netinfo Security, 2018, 18(11): 27-32.
[6]	Baoyuan KANG, Jiaqiang WANG, Dongyang SHAO, Chunqing LI. A Secure Authentication and Key Agreement Protocol for Heterogeneous Ad Hoc Wireless Sensor Networks [J]. Netinfo Security, 2018, 18(1): 23-30.
[7]	Chunhua GU, Yuan GAO, Xiuxia TIAN. Security Optimized RBAC Access Control Model [J]. Netinfo Security, 2017, 17(5): 74-79.
[8]	Zhong LIANG, Jiakun ZHOU, Han ZHU, Bo CHEN. Research on Aggregation Technology for Information Security Knowledge Based on Security Ontology [J]. Netinfo Security, 2017, 17(4): 78-85.
[9]	Jingzhe ZHOU, Changsong CHEN. Analysis of Network Information Security in the Cloud Computing Architecture [J]. Netinfo Security, 2017, 17(11): 74-79.
[10]	Qi SU, Wei WANG, Yin LIU, Zhanpeng YU. Research on the Scheme of Information Security Protection in Electric Power Industry [J]. Netinfo Security, 2017, 17(11): 84-88.
[11]	Nana HUANG, Liang WAN, Xuankun DENG, Huifan YI. A Cross Site Script Vulnerability Detection Technology Based on Sequential Minimum Optimization Algorithm [J]. Netinfo Security, 2017, 17(10): 55-62.
[12]	Lei ZHANG, Dongsheng YU, Jun YANG, Jiming HU. Research on Information Security Supervision Strategy Based on Private Cloud Model [J]. Netinfo Security, 2017, 17(10): 86-89.
[13]	Yubin WANG, Si CHEN, Nan CHENG. Research on Industrial Control System Security Defense [J]. Netinfo Security, 2016, 16(9): 35-39.
[14]	Xin FU, Yuhua LU, Zijian SHAO. Research on Information Security Simulation Experimental Platform of Public Security Video Monitoring System [J]. Netinfo Security, 2016, 16(9): 56-59.
[15]	Shiyuan YU, Yutian WANG, Xin LIU. Burpsuite Extender Apply in Vulnerability Scanning [J]. Netinfo Security, 2016, 16(9): 94-97.