Safety pre-warning method and system for industrial control network

Abstract

The present disclosure relates to an industrial control network security early warning method and system, wherein the industrial control network security early warning method includes: obtaining security-related data of control events of the industrial control network; performing CEP analysis on the security-related data; and adopting a method based on deep learning The classifier performs risk identification of control events on the data analyzed by CEP. The industrial control network security early warning method and system of the embodiments of the present disclosure can be deployed in an industrial control site with limited resources, and is suitable for a single-node or multiple-node deployment environment, and the deployment method is more flexible. Moreover, the deployment method at the industrial control site reduces network delay, improves the processing and response speed of real-time data, and improves the risk warning capability. In addition, the use of deep learning-based classifiers for risk identification has higher identification accuracy, and the combination of CEP analysis and deep learning solutions has greatly improved the efficiency of risk identification.

Description

technical field [0001] The present disclosure relates to the field of industrial control networks, in particular to an early warning method and system for industrial control network security. Background technique [0002] With the continuous integration of industrial control systems and the Internet, industrial control systems are inevitably exposed to network security threats, making the security and stability of industrial control networks increasingly uncontrollable. According to statistics, 70% of the networked devices in the current industrial control network have security vulnerabilities, and it is expected that 90% of the software and hardware devices connected to the Internet of Things will have a certain degree of security risks in the future. Therefore, the security issues of industrial control networks need to be resolved urgently. [0003] At present, for industrial control network security, the solutions of most manufacturers are to filter industrial control dat...

AI Technical Summary

Problems solved by technology

[0005] 1) Industrial control sites generally lack a large data center and cannot support the deployment of large cluster servers;

[0006] 2) The network structure of the industrial control site is relatively simple and single, which cannot meet the complex, large-scale, and high-speed data transmission requirements;

[0007] 3) The real-time data processing of the industrial control n

Images