基于多变体的控制软件异构冗余与动态重构技术研究

Research on Heterogeneous Redundancy and Dynamic Reconfiguration of Control Software Based on Multi-Variant[HS)]

摘要:

针对控制软件的防篡改问题,从工控安全角度出发,提出了一种利用多变体技术和虚拟化技术构建控制软件动态目标防御体系的新方法；通过多变体的异构冗余、动态重构和多模表决实现了软件层面的主动防御和安全态势感知,通过虚拟化技术实现了多变体执行环境的快速构建；着重介绍了技术路线、系统架构、动态重构策略、表决算法和同步机制；研究结果表明,该技术在提高控制系统可靠性的同时,使其具备了较强的主动安全防御能力。

Abstract:

To meet the anti-tamper requirement for control software, a new method is proposed to construct the moving target defense system of control software based on multi-variant and virtualization. The function of active defense and security situational awareness is achieved by heterogeneous redundancy, Dynamic reconfiguration and multimode voting of variant. multi-variant execution environment is structured by virtualization. The technical route, system architecture, dynamic reconfiguration, voting algorithm and synchronization mechanism are detailed in this paper. The research results show that this technique can improve the reliability and security actively for industrial control systems.