Fine-Grained Dynamic Fast Metrics for Industrial Control Terminal

The current mainstream security-proof schemes are based on static protection, which can only guarantee the integrity of program code and cannot defend against dynamic attacks that only change the execution flow of devices. The existing defense methods against dynamic attacks are often overhead and difficult to practically applied on industrial IoT devices with limited computing power and storage space. To this end, this paper investigates and analyzes the current research status of dynamic security detection schemes for devices in industrial control scenarios, and based on this, proposes a dynamic fast metric remote authentication scheme based on sliding windows in a targeted manner. The program execution flow graph PEG is obtained through static analysis, and the program execution branch streams are extracted according to the program dependency graph analysis, and partial metrics are performed on the executive branch streams, and the metric values are stored in the benchmark library as the basis for comparison of actual program execution. The trustworthy management platform compares the actual obtained metric values with the metric values in the benchmark library to determine the trustworthy status of the device. Finally, based on the experimental results, it is verified that this scheme is feasible for the metric of program execution and can be well applied to industrial scenarios.