Cyber physical systems (CPS) has been hailed as the next future of computing by integrating information technology into physical systems to increase their capabilities. Information network is an organic part of CPS, and vulnerability threat assessment of information network is one of the important bases of CPS risk assessment. In view of the limitation of general information network vulnerability threat assessment technology, this paper proposes an information network vulnerability threat assessment model based on dynamic attack and defence game. Firstly, a risk assessment model suitable for CPS is constructed based on the actual control scheduling of information system. At the same time, considering the constraint conditions of both sides, including the quantity of available resources, rational allocation of resources, cost-effectiveness and the number of attacked nodes, a more perfect information network vulnerability threat assessment model is established. Then, on this basis, the dynamic attack and defence game function and game solution steps are designed to realize the quantitative assessment of information network vulnerability threat of CPS risk assessment. Finally, a simulation test based on IEEE 34-node information network system is carried out to verify the effectiveness of the proposed method.

通过将信息技术集成到物理系统中以增强其功能，网络物理系统（CPS）被誉为计算的下一个未来。信息网络是CPS的有机组成部分，信息网络的脆弱性威胁评估是CPS风险评估的重要基础之一。针对通用信息网络脆弱性威胁评估技术的局限性，提出了一种基于动态攻防博弈的信息网络脆弱性威胁评估模型。首先，基于信息系统的实际控制调度，建立了适用于CPS的风险评估模型。同时，考虑到双方的约束条件，包括可用资源的数量，资源的合理分配，结合成本效益和受攻击节点数，建立了较为完善的信息网络脆弱性威胁评估模型。然后，在此基础上，设计了动态攻防游戏功能和游戏解决步骤，以实现对CPS风险评估信息网络脆弱性威胁的定量评估。最后，基于IEEE 34节点信息网络系统进行了仿真测试，验证了该方法的有效性。