Research on Application of Mimic Defense in Industrial Control System Security

The attacks and defenses in industrial control system(ICS) security has been in an asymmetrical situation. Due to the closeness, specificity and complexity of ICS, it has more vulnerabilities and deeper hidden backdoors. The traditional “remedy” type of defense is difficult to prevent increasingly complex attack methods. Starting from the attack chain model, this paper analyzes shortcomings of traditional ICS defense technology, and proposes an ICS security system structure based on mimic defense. Digital twin technology is used to build executive entities of mimic defense model, and increase the dynamic and heterogeneity of ICS. The system structure based on mimic defense has better protection against unknown vulnerabilities, and reduces the probability of being attacked successfully, improve the ICS's ability to withstand attacks through endogenous security at the system level, and alleviate the passive and lagged situation of ICS defense.