Dynamic defense method of industrial control network with endogenous security

Abstract

The invention discloses an intrinsically secure industrial control network's dynamic defense method. The method comprises the step of carrying out IP message reconstruction in the network transport layer through the encryption algorithm for dynamic reconfiguration and in combination with the dynamic changes of the keys and passwords so as to establish an intrinsically secure and special data transmission channel among the node devices. The present invention provides an intrinsically secure industrial control network's dynamic defense method, which aims to solve the problems existing in a traditional industrial control network's defense system, and based on the open Ethernet communication links, a multi-mode, dynamic, and transparent secure and special transmission channel is created, which can effectively blocks illegal and unauthorized accesses from the internet and the man-in-the-middle attacks and repetitive attacks, changes passive defense into active defense, and turns boundary security into intrinsic security. The invention further proposes a data transmission method applied to the intrinsically secure industrial control network's dynamic defense method.

Description

technical field [0001] The invention relates to a dynamic defense method for an industrial control network facing the field of industrial control security. More specifically, the present invention relates to a specific method for establishing a multi-mode, dynamic and transparent secure dedicated data transmission channel between industrial control devices. Background technique [0002] With the deep integration of informatization and industrialization and the introduction and development of "Industry 4.0", "Intelligent Manufacturing", and "Internet +", the industrial control network is no longer a closed "island", but needs to be deeply integrated with the Internet and the Internet of Things , for the control network whose security is very fragile, it will inevitably bring huge security risks. [0003] Traditional security defense measures can only adopt the defense-in-depth technology based on partition isolation when facing specific problems such as high real-time and re...

AI Technical Summary

Problems solved by technology

[0004] However, the control network itself is still an open system. The specific manifestations are: open communication protocols, data transmission in plain text, insufficient data legality and integrity verification, and lack of identity authentication and access control between control devices. Internet attacks are difficult to be effective, and the defense strategies adopted are mainly traditional passive defense based on prior knowledge, lack of changes, and the defense effect needs to be improved

Images