Active Access Control for the Operational Security in Industrial Control Systems

The Trusted Computing 3.0 architecture provides ways to guarantee a safe operation for industrial control systems (ICS). However, it is a critical issue to establish an access control strategy that conforms to the characteristics of the industrial control system on a trusted base. This paper proposes an access control strategy oriented to the security of operational behavior in ICS. It aims to the secure access of core data in the monitor workstation and data server, analyzes the typical abnormal behaviors of data access, and establishes fine-grained access control strategies from the aspect of the accessing of operating system kernel, the protection of stored data, and the control of critical instruction. Finally, the deployment scheme is given. The proposed access control strategy will improve the active defense theory based on the trusted computing in ICS.