Terminal security access control method

Abstract

Disclosed is a terminal security access control method. A system which comprises a database module, an ARP table scanning module, a terminal isolation module, a VRV system communication module and a dangerous equipment recognition module is firstly built. The method comprises the steps that firstly, an known equipment table and a switch table are manually built, and stored in the database module; secondly, an ARP state table is obtained, wherein the ARP state table is composed of ARP information composed of MAC address-IP address pairs; thirdly, a question equipment table is obtained by the VRV system communication module from an external VRV system and stored in the database module; fourthly, a dangerous equipment table is obtained; fifthly, an isolation equipment table is read by the terminal isolation module, and dangerous equipment in the dangerous equipment table is isolated. The network application function of a terminal can be limited through a client program deployed on the terminal, or the network access behavior of the terminal is controlled by deploying a firewall, and terminal equipment can be automatically isolated from a network in time.

Description

technical field [0001] The invention belongs to a method for controlling the security of terminal equipment in a power information network. Background technique [0002] Terminal equipment is an important part of the power information network, and terminal security is the key work in power information operation and maintenance. In order to strengthen the security management of power terminals, the State Grid Corporation of China has deployed and implemented a VRV terminal control program similar to Beixinyuan to realize real-time collection and early warning of terminal security status. However, in the current operation and maintenance process, for terminal devices that have hidden safety hazards or have already occurred, the operation and maintenance personnel lack the necessary automatic technical means to physically isolate the terminal from the network, and can only manually disconnect the network cable or log in to switch off the response The network isolation of switc...

AI Technical Summary

Problems solved by technology

However, in the current operation and maintenance process, for terminal devices that have hidden safety hazards or have already occurred, the operation and maintenance personnel lack the necessary automatic technical means to physically isolate the terminal from the network, and can only manually disconnect the network cable or log in to switch off the response The network isolation of switch ports is not only unable to eliminate potential safety hazards in time, but also puts forward high requirements on the timeliness of operation and maintenance personnel to deal with hidden dangers.

Images