摘要
随着人工智能技术的发展,智能制造已成为目前企业生产的必然选择.然而与此同时,智能制造设备群面临的安全风险也不断上升,一个被入侵的智能制造设备不仅会造成机密泄露、生产链错误等问题,还会成为攻击者的跳板进而影响整个设备群的安全.设计了一种基于远程证明的智能制造系统设备群的主动防御方案SecRA,以验证设备群的安全状态.SecRA对每个智能制造设备都生成独立的证明挑战,实现了网关和设备间点到点通信,保证了该主动防御方法的安全性.SecRA通过对智能制造系统中网关设备的功能扩展,完成验证者和设备之间的异步通信,以匹配现有智能制造系统网络结构.此外,SecRA基于挑战-质询的证明协议,将通信和计算开销都转移到资源丰富的网关设备,极大节省了设备端的开销.最后,仿真实验证明了SecRA主动防御方法的高效性和可行性.
With the development of artificial intelligence technology,intelligent manufacturing has become an inevitable choice for enterprise production.However,a compromised device not only causes issues such as confidentiality leaks and production chain errors,but also serves as a springboard for attackers and thus affects the security of the entire swarm.In this paper,we propose a proactive defense solution for intelligent manufacturing swarms based on remote attestation(SecRA).SecRA generates independent challenges for each device,enabling point-to-point communication between gateways and devices.By extending the functionality of gateways,SecRA utilizes asynchronous communication to adapt to the existing network structure.In addition,based on the challenge-query attestation protocol,communication and computation costs are transferred to resource-rich gateways,greatly reducing the burden of devices.Finally,the efficiency and feasibility of the SecRA are experimentally verified.
作者
孔维一
李昕
宋永立
况博裕
付安民
Kong Weiyi;Li Xin;Song Yongli;Kuang Boyu;Fu Anmin(School of Computer Science and Engineering,Nanjing University of Science&Technology,Nanjing 210094;Beijing Institute of Computer Technology and Application,Beijing 100854;School of Cyber Science and Engineering,Nanjing University of Science&Technology,Nanjing 210094)
出处
《信息安全研究》
CSCD
2023年第6期580-586,共7页
Journal of Information Security Research
基金
国家自然科学基金项目(62072239)
未来网络科研基金项目(FNSRFP-2021-ZD-05)。
关键词
人工智能
智能制造
远程证明
群证明
主动防御
artificial intelligence
intelligent manufacturing
remote attestation
swarm attestation
proactive defense
