ICS Software Trust Measurement Method Based on Dynamic Length Trust Chain

Abstract

Aiming at the real-time requirements for industrial control systems, we proposed a corresponding trust chain method for industrial control system application software and a component analysis method based on security sensitivity weights. A dynamic length trust chain structure is also proposed in this paper. Based on this, the industrial control system software integrity measurement method is constructed. Aimed at the validity of the model, a simulation attack experiment was performed, and the performance of the model was repeated from multiple perspectives to verify the performance of the method. Experiments show that this method can effectively meet the integrity measurement under the condition of high real-time performance, protect the integrity of files, and improve the software credibility of industrial control system.

The Assessment of Cloud Service Trustworthiness State Based on D-S Theory and Markov Chain

“…Therefore, this paper compares the proposed methods with other common security assessment methods. These methods include risk uncertainty assessment method based on information entropy [28], [30]- [32], risk weight method based on FAHP [24], [25], [56], risk level assessment method based on risk matrix [40], [41], and trust assessment method based on trust chain [42]- [44].…”

“…Therefore, this paper compares the proposed methods with other common security assessment methods. These methods include risk uncertainty assessment method based on information entropy [28]- [30], risk weight method based on FAHP [22], [23], [51], risk level assessment method based on risk matrix [38], [39], and trust assessment method based on trust chain [40]- [42]. In order to reasonably compare the characteristics of different methods, this paper makes a comparative analysis from the following 5 aspects around input, output and assessment process of each method.…”

“…Chain [42] Through the established trust chain, this method can effectively judge whether the integrity of the system is damaged and detect the defects of the system.…”

“…Chain [42] As long as the integrity of the system is detected to be destroyed,this method can effectively reflect some defects of the system, and there is almost no artificial evaluation. Therefore, this method has high objectivity.…”

“…Although these single methods can effectively realize the quantitative assessment of trustworthiness, they lack the assessment of cloud service trustworthiness and its changes in long-time use process. The trusted computing method based on trusted chain [42]- [44] can judge whether the system is damaged by detecting the integrity of the system. However, this method mainly tests the quality problems of the service itself, and does not conduct a comprehensive assessment specifically for the management risk, application environment risk and other relevant factors of the service provider, and the consumption cost of this method is high.…”