Overview of the Application of Knowledge Graph in Industrial Control Security Field
Xin Chen, Yahui Li, Peng Xu, Kunkun Wang, Sardar Shan Ali Naqvi · 2025
The threats to industrial control network security are mainly caused by attackers who use industrial Internet security vulnerabilities to invade industrial control systems (ICS). In the past, scholars often used anomaly detection techniques to analyze and process industrial control network data in order to discover attacks and anomalies in industrial control networks. However, due to the limitations of such techniques and their general ability to detect known attacks, they cannot predict unknown attacks. In recent years, the industry has proposed the industrial Internet security knowledge graph, which can efficiently integrate massive and heterogeneous data in the network, and effectively use these data to conduct network security risk assessment, situation awareness, fault traceability, failure analysis, etc. in the industrial field. This article focuses on the application of knowledge graphs in the vertical field of industrial control system security. Firstly, the concept and construction principles of industrial security knowledge graphs are introduced. Then, the research progress of knowledge graphs in industrial security applications such as security situational awareness, security threat analysis, and security risk assessment is classified and sorted out. Based on this, the challenges faced in the application of knowledge graphs in the field of industrial security are analyzed and summarized.