A Quantitative Evaluation Method for Cryptography Applications in Industrial Control Systems

Abstract

The deep integration of cryptography with industrial control protocols is a technical difficulty. Both the industry and academia are carrying out in-depth application research on industrial control system cryptography application. Security assessment is one of the important tasks for industrial control cryptography applications. This paper presented a quantitative evaluation method for industrial control cryptography applications. Using this method, targeting at the general security framework presented in NIST SP 800–82, we analyzed the cryptography applications at network and communication level, and at application data security level respectively. It shows that technological breakthroughs at these two levels can improve the overall quantitative analysis results of the industrial control system by about 10%. Based on the quantitative analysis results, this paper puts forward relevant suggestions on the cryptography application of industrial control system, which has reference significance for the research and development of industrial control system cryptography technology.