An Efficient Tool for Industrial Control System Security Analysis

With the development of internet, the network connection between Industrial Control System (ICS) and public internet has been becoming more and more closely. What's more, the traditional IT system attacks have been spread to ICS and become more frequently. However, the traditional security analysis of IT system is not enough to be applied to ICS. In this paper, we present a tool called Attack Path Modeling and Analysis System (APMAS), which provides a graphical user interface (GUI) for the user to model and analyze ICS attack interaction. The main four components including network modeling, rule modeling, attack tree modeling and security analysis are briefly described. Moreover, we propose a solution combined with multi-objective optimization to generate a Pareto front consisting of a group of defense suggestions.