Industrial personal computer safety protection system and industrial personal computer safety protection method based on security baseline

Abstract

The invention provides an industrial personal computer safety protection system and an industrial personal computer safety protection method based on a security baseline. The method comprises the steps of establishing the security baseline for an industrial personal computer terminal according to information of each industrial personal computer terminal in an industrial control network; when unknown data enter the industrial control network, detecting security of the unknown data; updating the security baseline according to a security detecting result of the known data; allowing entering of the safe unknown data in the industrial control network, and preventing operation of unsafe unknown data in the industrial control network. According to the industrial personal computer safety protection system and the industrial personal computer safety protection method, security of equipment in the industrial control network is ensured through the closed security baseline; furthermore the security baseline of the equipment can be dynamically updated; and detection of the unknown data and establishment of the security baseline are performed in a service end, thereby preventing resource occupation of the industrial personal computer terminal and realizing no influence on service operation of the industrial personal computer terminal.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an industrial computer security protection system and method based on a security baseline. Background technique [0002] At present, network attacks have changed from malicious attacks aimed at the public with no clear purpose to advanced threat attacks with clear targets and the purpose of launching information warfare. The existing anti-malware software uses a blacklist mechanism and relies on simple signature scanning As the core technology, this mechanism cannot meet the purpose of protecting the security of industrial computers. Contents of the invention [0003] Aiming at the problems existing in the above-mentioned prior art, the present invention proposes a security baseline-based industrial computer security protection system and method, and establishes a security baseline for the industrial computer terminal according to the information of each industrial...

AI Technical Summary

Problems solved by technology

[0002] At present, network attacks have changed from malicious attacks aimed at the public with no clear purpose to advanced threat attacks with clear targets and the purpose of launching information warfare. The existing anti-malware software uses a blacklist mechanism and relies on simple signature scanning technology as the core technology, this mechanism cannot meet the purpose of protecting the security of industrial computers

Images