An Industrial Control System Risk Assessment Method

With the rapid development of information technology, the combination of industrial control system and network communication technology is widely used in energy, manufacturing, military, aerospace and transportation. Attacks against industrial control system every year are lower than those against the Internet, but they have a more significant impact on society. Therefore, risk assessment of industrial control system is the first task to prevent attacks. In this paper, we propose a risk assessment method for industrial control system, starting from the idea of game theory, combining the assessment index assignment methods of subjective hierarchy process analytic hierarchy process (AHP) and objective entropy weight method (EWM), determining the target matrix according to the weights of the two, and utilizing the approximation of the ideal solution. The final evaluation results are obtained by using the technique for order preference by similarity to ideal solution (TOPSIS). The results show that the combination of subjective and objective methods can make the weighting of assessment indicators more reasonable and effective.