DNP3 protocol network protection frame based on TCP/IP

Abstract

The invention discloses a DNP3 protocol network protection frame based on TCP / IP. The DNP3 protocol network protection frame comprises a monitoring and control module, a monitoring module, a function selection and generation module, an automatically marking module, a data set, a rule-based learning module, a rule module, an abnormal behavior analysis module, a classification module, a database and an operating module. The frame provided by the invention has the beneficial effects as follows: the frame adopts a rule-based abnormity detection mechanism to detect a network attack, and a classification principle is also provided, so that autonomous network protection is provided for access control. The frame aims at being capable of detecting the attack of an attacker with root permissions of Master and Outstations, warning for misoperation of an operator, and meanwhile providing timely protection. Security and extremely high confidentiality in use are ensured; the DNP3 protocol network protection frame based on TCP / IP is convenient to operate, high in security and rapid in connection and reaction speed of the modules.

Description

technical field [0001] The invention relates to a network protection framework, in particular to a TCP / IP-based DNP3 protocol network protection framework, belonging to the technical field of computer network protection applications. Background technique [0002] Due to the advantages of high efficiency and convenience of Internet technology, more and more smart devices have begun to be deployed in some key infrastructure systems. As one of the core systems in the infrastructure system, the SCADA system also utilizes numerous control and monitoring devices. Since the smart devices deployed on the system do not have any security protection and are easily discovered by scanning tools, and the relationship between these devices and the system is close, these devices also provide motivation for attackers to attack. The communication and control protocol of the network has also become the main target of attackers. As one of them, the DNP3 protocol is also widely used in SCADA s...

AI Technical Summary

Problems solved by technology

As an important network protection protocol in modern networks, the existing DNP3 does not have security protection capabilities and is vulnerable to security attacks. Modifying the DNP3 protocol may lead to the replacement of original equipment, which is not easy to implement

Images