Industrial control system oriented active vulnerability detection system and detection method

Abstract

The invention discloses an industrial control system oriented active vulnerability detection system and detection method and relates to the field of industrial control system security. A client server mode is employed in the vulnerability detection system. The system comprises a controller, clients, a server, an evaluation report module and a data center. The controller is connected with the server. The server is connected with the different clients. The clients are connected with the internet through a firewall and a router and also can be connected with the data center for data interaction. Moreover, the server is connected with the data center for data interaction. An evaluation report is generated according to data provided by the data center. The system and the method have the advantages that according to the provided vulnerability detection system, attack code is unnecessarily developed. Compared with an MBSA (Microsoft Baseline Security Analyzer) vulnerability detection system developed by the Microsoft, the system has the advantages that the detection speed is fast, the accuracy is high, the high-stability and high-timeliness demands of the industrial control system can be satisfied well, the system is suitable for a manager to evaluate the security condition of the whole industrial control system, and the stable operation of the industrial control system is not influenced.

Description

technical field [0001] The invention relates to the field of industrial information security, in particular to an active loophole detection system and detection method for industrial control systems. Background technique [0002] The information security of the industrial control system is related to the safety and stable operation of the national energy and infrastructure industries, and is a severe challenge for enterprises and national security. More and more system products use common protocols, common hardware and common software, and are connected to public networks such as the Internet in various ways. Threats such as viruses and Trojan horses are spreading to industrial control systems, and system information security issues have become increasingly prominent. The process control system has developed from stand-alone, distributed to networked, and different types of information and communication technologies (ICT), including Internet and wireless technologies, have b...

AI Technical Summary

Problems solved by technology

The most fundamental reason why industrial control systems face attacks such as denial of service, control command tampering, and advanced persistent threats (APT) is that the system has vulnerabilities that can be penetrated

Images