Industrial control dynamic defense method and system

Abstract

The invention provides an industrial control dynamic defense method. The method comprises the following steps: cleaning industrial network flow data to obtain industrial control protocol flow data; judging the industrial control protocol flow data; recording a protocol data format of an unknown industrial control protocol, and obtaining a data interval range of the industrial control protocol; intelligently filling protocol contents according to the interval range, and integrating the protocol format and the filled data to form a learning result; generating a dynamically changing white list according to the learning result; and performing industrial control dynamic defense according to the white list. The invention further provides an industrial control dynamic defense system. The industrial control dynamic defense method and system provided by the invention has the advantages of being able to accurately recognize industrial private protocols, high in compatibility and high in protection precision, etc.

Description

technical field [0001] The present invention relates to the field of industrial control, and more particularly relates to a dynamic defense method and system for industrial control. Background technique [0002] Industrial control technology is a kind of use of computer, control theory, instrumentation and other information technology to realize detection, control, optimization, scheduling, management and decision-making of industrial production process, so as to increase production, improve quality, reduce consumption and ensure safety. comprehensive technology. [0003] Generally, applications in the field of industrial control must meet the following requirements: availability, integrity, and confidentiality, and the design of industrial equipment is usually designed according to the principle of availability priority, which restricts data confidentiality in industrial environments. significant safety hazard. When a major incident occurs in the national infrastructure, ...

AI Technical Summary

Problems solved by technology

[0005] The technical problem mainly solved by the present invention is to provide an industrial control dynamic defense method and system to realize accurate identification of industrial private protocols in the industrial environment, and carry out innovative design of software according to the particularity of the industrial environment, so as to realize the software that conforms to the priority characteristics of industrial usability System, and the use of intranet or private network management to solve the problem that the industrial site cannot be updated through the Internet by means of contact localization upgrades

Images