The invention relates to the technical field of power industrial
control network asset management, in particular to a power industrial
control network security-oriented asset dynamic
digital fingerprint construction
system, which comprises a
data acquisition module, a first determination module, a second determination module, an identification module, an adjustment module and a construction module. Through accurate multi-
level data acquisition, behavior analysis and threshold adjustment, the security of an
electric power industrial
control network is remarkably improved, the
system can acquire key behavior data of equipment in real time, such as the number of bytes of a data packet, the memory
utilization rate and the number of login failures, and normal equipment and abnormal equipment are accurately identified through multi-stage screening, so that the security of the
electric power industrial control network is improved. The
system flexibly deals with the dynamic change of the equipment behavior by adjusting the
byte number fluctuation threshold value, ensures the high efficiency and accuracy of the safety detection, and effectively solves the problems that the system cannot adapt to the network asset change and cannot identify the abnormal equipment in real time due to the dependence on a static
fingerprint database and a fixed similarity threshold value.