Attack graph generation method based the security domain on industrial control systems

An attack graph technique is given for industrial control systems(ICS)that simplifies the complexity of the attack graph generation based on the characteristics of the control system network structure.The characteristics of the control system's hierarchical structure were analyzed to develop a host security domain and a network security domain.The network is divided into some security domains so that the attack patterns(remote/local)and other factors can be separated to reduce the complexity of the attack graph generation.Consequently,this method improves the production efficiency and simplifies the attack graph scale.The method is tested in a virtual network environment.