基于概率攻击图的船舶网络安全评估模型

杨家轩, 许洲锦, 来源, 孙瑶

doi:10.16411/j.cnki.issn1006-7736.2023.01.003

大连海事大学学报 >

2023 , Vol. 49 >Issue 1: 26 - 33

DOI: https://doi.org/10.16411/j.cnki.issn1006-7736.2023.01.003

交通运输工程

基于概率攻击图的船舶网络安全评估模型

展开

(大连海事大学航海学院，辽宁大连 116026；大连市船舶网络安全工程研究中心，辽宁大连 116026)

杨家轩（1981 - ），男，博士，教授，博士生导师，E-mail：yangjiaxuan@dlmu.edu.cn ;许洲锦（1997 - ），男，硕士生

网络出版日期: 2023-01-29

基金资助

国家自然科学基金国际（地区）合作与交流项目（42261144671）;国家自然科学基金面上项目（61771086）

收起

Ship cyber security assessment model based on probability attack graph

Expand

(Navigation College, Dalian Maritime University, Dalian 116026, China；Dalian Ship Cyber Security Engineering Research Center, Dalian 116026, China)

Online published: 2023-01-29

Fold

摘要

为提升船舶网络安全性，结合概率图模型和时间指标构建一种定量的船舶网络安全评估模型，在考虑时间指标基础上，利用概率攻击图计算船舶网络被攻克概率。运用蒙特卡洛法模拟得出船舶网络被攻克概率与访问路径长度、节点被攻克概率、时长的关系。结果表明，基于概率攻击图的船舶网络安全评估模型可评估不同指标对船舶网络被攻克概率的影响。

关键词： 船舶网络安全; 概率攻击图; 蒙特卡洛法; 评估模型

本文引用格式

杨家轩, 许洲锦, 来源, 孙瑶 . 基于概率攻击图的船舶网络安全评估模型[J]. 大连海事大学学报, 2023 , 49(1) : 26 -33 . DOI: 10.16411/j.cnki.issn1006-7736.2023.01.003

Abstract

In order to improve the ship cyber security evaluation model, a quantitative ship cyber security evaluation model was built by combining probability graph model and time index. On the basis of considering time index, the probability attack graph was used to calculate the probability of the ship cyber being attacked. Monte Carlo method was used to simulate the relationship between the probability of ship cyber being conquered and the length of access path, the probability of node being conquered and the time length. The results show that the ship cyber security evaluation model based on probability attack graph can evaluate the impact of different indicators on the probability of ship cyber being attacked.

Key words： ship cyber security; probability attack graph; Monte Carlo method; assessment model

参考文献

[1]CAPROLU M, PIETRO R D, RAPONI S, et al. Vessels cyber security: issues, challenges, and the road ahead[J]. IEEE, 2020,58 (6): 90-96.

[2]Navaldome. Naval dome hacks into ships’ system to prove cyber vulnerabilities [EB/OL]. (2018-01-02)[2022-10-13].https://navaldome.com/threat.html.

[3]ICS-Advisory. Auto-Maskin RP210E, DCU210E, and Marine Observer Pro [EB/OL].(2020-02-20)[2022-10-13].http//www.uscert.gov/ics/advisories/icsa-20-051-04.

[4]苏义鑫, 刘宇杰, 龙飞. 船舶网络安全综述[J]. 船电技术, 2018, 38(9): 5-10.SUN Y X, LIU Y J, LONG F. Overview on ship cyber security[J]. Marine Electric & Electronic Engineering, 2018, 38(9): 5-10.(in Chinese)

[5]王志中.船舶通信网络安全评估模型研究[J].舰船科学技术,2018,40(6):88-90.

WANG Z Z. Research on ship communication network security evaluation model[J]. Ship Science and Technology, 2018, 40(6):88-90. (in Chinese).

[6]时荣, 王喜.舰船网络安全评估的仿真模拟实验研究[J].舰船科学技术,2019, 41(18): 154-156.

SHI R, WANG X. Simulated experimental study on ship network security assessment[J]. Ship Science and Technology, 2019, 41(18): 154-156. (in Chinese).

[7]SVILICIC B, RUDAN I, JUGOVIC A, et al. A study on cyber security threats in a shipboard integrated navigational system[J]. Marine Science and Engineering, 2019, 7(10): 364-375.

[8]SAHAY R, MENG W, ESTAY D S, et al. Cyber Ship-IoT: a dynamic and adaptive SDN-based security policy enforcement framework for ships[J]. Future Generation Computer Systems, 2019, 100(2): 736-750.

[9]SVILICIC B, BRCIC D,ZUSKIN S D, et al. Raising awareness on cyber security of ECDIS[J]. TransNav: the International Journal on Marine Navigation and Safety of Sea Transportation, 2019, 13 (1): 107-114.

[10]SVILICIC B, KAMAHARA J, ROOKS M, et al. Maritime cyber risk management: an experimental ship assessment[J]. The Journal of Navigation, 2019, 72(5): 1108-1120.

[11]KAVALLIERATOS G, KATSIKAS S. GKIOULOS V. Cyber-attacks against the autonomous ship [M]// Computer Security. [S.l.]: Springer, 2018: 20-36.

[12]TAM K, JONES K. MaCRA: a model-based framework for maritime cyber-risk assessment[J]. WMU Journal of Maritime Affairs, 2019, 18(1): 129-163.

[13]TAM K, JONES K. Cyber-risk assessment for autonomous ships[C]//2018 International Conference on Cyber Security and Protection of Digital Services. Glasgow: IEEE,2018: 1-8.

[14]BALDUZZI M, PASTA A, WILHOIT K. A security evaluation of AIS automated identification system[C]//Proceedings of the 30th Annual Computer Security Applications Conference. New York: ACSA, 2014: 436-445.

[15]KESSLER G C, CRAIGER J P, HAASS J C. A taxonomy framework for maritime cyber security: a demonstration using the automatic identification system[J]. TransNav: International Journal on Marine Navigation and Safety of Sea Transportation, 2018, 12(3): 429-439.

[16]ENOCH S Y, LEE J S, KIMD S. Novel security models, metrics and security assessment for maritime vessel networks[J]. Computer Networks, 2021, 189(6): 107934-107952.

[17]MELL P, SCARFONE K, ROMANOSKY S. Common vulnerability scoring system version 2: specification document [EB/OL](2007-07-30)[2022-10-13]. https://www.first.org/cvss/v2/guide.

Options

文章导航

模态框（Modal）标题

摘要

本文引用格式

Abstract

参考文献