The invention discloses a method for quickly identifying a networked industrial control device. The method is characterized by comprising a pre-scanning stage and an industrial control device identification stage, wherein the pre-scanning stage comprises: uniformly allocating scanning tasks by using a distributed scanning mechanism, splitting a specified
IP address segment, judging whether an IP host and a port survive by using a TCP stateless
detector, and storing IP addresses of the survival IP host and the survival port in an IP buffer
pool identified by the device, and the industrial control device identification stage comprises: obtaining the survival IP host and the port from the IP buffer
pool, establishing a complete TCP connection, sending a specific industrial control protocol identification data packet of the port, waiting for the response of a
server, returning a data packet by the networked industrial control device, analyzing the data packet, and matching the data packet with a
fingerprint library of the industrial control device. According to the method disclosed by the invention, the distributed scanning technology is imported, segmented scanning is carried out by fully using scanning nodes, the resources of a computer are saved, the scanning efficiency is greatly improved, and meanwhile the
survivability of the IP host and the industrial control port are clarified before the industrial control device is identified, thereby shortening the
response delay time caused by the non-survival of the port.