Data filtering method and device

Abstract

The invention discloses a data filtering method and device and is used for filtering threat data packets in data packets sent from a first terminal to a second terminal. The method comprises the steps of converting TCP data packets received from the first terminal into data streaming; analyzing the data streaming according to a preset rule, thereby filtering threat data contained in the data streaming; packaging data except the threat data in the data streaming into continuous TCP data packets; and sending the continuous TCP data packets to the second terminal in sequence. According to the data filtering method and device provided by the embodiment of the invention, the TCP data packets sent to the second terminal by the first terminal are converted into the data streaming, the threat data is identified and filtered, the rest secure data is converted into the TCP packets, and the TCP packets are sent to the second terminal, so the threat data is filtered, the continuity of the TCP data packets sent to the second terminal is ensured, the connection interruption is avoided, and the industrial control stability and reliability are ensured.

Description

technical field [0001] The invention relates to the field of industrial control firewalls, in particular to a data filtering method and device. Background technique [0002] A firewall is a system or combination of systems that enforces a boundary between two or more networks, and is a controlled access point between one network and another. It can be divided into hardware firewall and software firewall, which can scan all network communication information flowing through it, and filter out some offensive operations, so as to prevent the target network from being damaged. The firewall can also close ports that are not commonly used, and it can also prohibit the communication of specific ports and the visits from some special sites, thereby preventing all communications from unknown intruders. [0003] In the industrial control scenario, different industrial control devices communicate through industrial control protocols. The industrial control protocol transmits data on t...

AI Technical Summary

Problems solved by technology

Due to the particularity of industrial control scenarios, the requirements for data delay and continuity are extremely high. If the continuity of the entire business is affected due to the discarding of some threatening data packets in the middle, it will have a huge impact on industrial production.

Images