Research On Information Security Evaluation Method Of Oil And Gas SCADA System Based On Factor Space

Oil and gas SCADA system currently is facing severe information security situation, and information security assessment for the existing SCADA system is the significant response to that situation. Unfortunately, at this stage, there're no scientific information security evaluation methods for oil and gas SCADA system at home and abroad. This topic is positive try to evaluate the information safe state of oil and gas SCADA system while information security assessment standard specification of the industrial control system is imperfect, evaluation objects rather vague, and there hasn't formed perfect methods of assessing information security state of oil and gas SCADA system yet.This article first analyzes the specific meaning of information security of oil and gas SCADA system. By comparing with information technology system and analyzing system and asset identification, zoning, etc., the topic parses the true meaning of information security of the oil and gas SCADA system; Secondly by the guiding significance information security evaluation standards and specifications of industrial Control systems, evaluation objects and requirements are clearly understood, and further the evaluation indicators (condition factors) are digged out. On this basis, the topic introduces the safety defense evaluation technical route on events happening before, during and after and formulate the events happening before, during and after table of information security of the oil and gas SCADA system, furthermore representes evaluation index factor in the form of cause and effect diagram which clearly demonstrates the different levels of conditioning factors impacting on information security evaluation; Then with factor space theory, this article establishes the information security evaluation of oil and gas SCADA system theoretical model, and formals description. For methods in factor neurons of evaluating model, using the traditional fuzzy membership evaluation, cloud model evaluation and Mamdani factor analysis reasoning assessment method based on factor space theory; In the evaluation of resource utilization which belongs to the secondary factor is evaluated using the cloud model reasoning evaluation,other evaluation methods adopting the membership evaluation from the factor values in the original score table to the upper factors,and when it comes to the qualitative to the qualitative evaluation the topic (or qualitative evaluation from the quantitative factor values in the original score table to the level facrors namely events happening before, during and after factor)adopts factor analysis evaluation method.This article realizes the factor analysis programming (a very promising method dealing with big data analytics), given a factor table as input,the factor analysis method can obtain association rules as output.The association rules of the factor analysis method output are added to the Fuzzy logic toolbox with code in Matlab2014a, thereby enabling inference; And compare Mamdani factor analysis reasoning algorithm with decision tree's ID3 algorithm in two sides:the average accuracy and confusion matrixis.The result is that average accuracy of 12 times of factor analysis's prediction is 92.06%, decision tree algorithm is 91.45% relatively,four composite indicators derived from the confusion matrixis are better than the decision tree algorithm.So factor analysis based on the factor space can be applied to evaluate and predicte. Finally, the topic based on the initial score table uses three methods as examples of the evaluation to show the evaluation model proposed general process of evaluation. It should be noted that,the factor analysis method based on the factor space is a relatively new evaluation method (literature appeared in 2014), so there are many areas needed to improve.That automatic system scanning and evaluation tools which automatically collect system data should also be developed on the basis of this topic, can realize the goal of achieving evaluation more intelligently, objectively and scientificly.