Secure isolation system applied to PROFINET industrial Ethernet

Abstract

The invention discloses a secure isolation system applied to a PROFINET industrial Ethernet. Taking the PROFINET real-time Ethernet with wide application prospect as a research object, a PROFINET-based dedicated industrial information security device is developed by combining a PROFINET communication protocol depth detection function with a general industrial firewall function. Besides the functions of blocking network attack and defending viruses, preventing unauthorized access of a control network and field equipment and protecting general information security of data encryption, identity authentication and the like, the system also deeply analyzes the communication characteristic of the PROFINET network, and effectively recognizes abnormal communication situations on the network by predicting network communication behaviors according to configuration information and monitoring a communication relation, a real-time throughput and a non-real-time bandwidth at the initial networking stage, as well as deeply detecting data packets of a PROFINET application layer and the like. When a security threat appears, the contact between the PROFINET network and the external network is timely ''isolated'', and a hazard identification processing and alarm log is sent, so that security download can be performed on an out-of-control or fault main station.

Description

Technical field: [0001] The invention relates to the field of industrial Ethernet and information security, in particular to the field of safety isolation of PROFINET industrial Ethernet. Background technique: [0002] With the increasingly widespread application of industrial communication technology, in practice, industrial control systems are facing increasingly prominent security threats. In the past, less consideration was given to the security of industrial control systems, because the communication network of industrial control systems is a dedicated network, and it is generally believed that it is difficult to pose a security threat to industrial control systems. However, the current technological development trend is: the integration and intelligence of industrial enterprise management and control, that is, the management of industrial enterprises is not limited to upper-level information interaction, but frequently obtains data from the underlying production and ma...

AI Technical Summary

Problems solved by technology

However, at present, domestic industrial control equipment and system manufacturers have seriously insufficient investment in the research and development of industrial control system security technology, and there are no related technologies and products in China.

Images