Network security monitoring method for industrial control system

Abstract

The invention discloses a network security monitoring method for an industrial control system. The method comprises the following steps: collecting relevant information of an internal monitoring object of the industrial control system; performing security analysis on the collected relevant information; and when potential abnormal behavior is found through analysis, generating a relevant safety control order, and issuing the order to the relevant monitoring object for execution so as to block the abnormal behavior. According to the invention, real-time monitoring on major hidden security dangers of the industrial control system such as peripheral access, personnel operation, network external connection and the like is realized through abundant data acquisition of core networking equipment of the industrial control system. At the same time, through analysis processing on various behavior, the abnormal behavior is found and blocked timely, and thus real active defense of the industrial system is realized. For the current difficulty of effectively applying traditional security protection measures to the industrial control system, the major security threats to the industrial control system at present are well solved from the perspective of monitoring early warning.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a network security monitoring method for industrial control systems. Background technique [0002] Industrial control systems based on acquisition, monitoring and control are widely used in various industries such as electric power, petrochemical, transportation, metallurgy, etc., and realize the automation of industrial control. Typical industrial control systems include SCADA (Supervisory Control And Data Acquisition, supervisory control and data acquisition), DCS (Distributed Control System, distributed control system), PLC (Programmable Logic Controller, programmable logic controller), etc. With the increasing integration of my country's industrialization and informatization, computer technology and network communication technology are widely used in industrial control systems, and traditional industrial control systems have gradually broken the previous closedne...

AI Technical Summary

Problems solved by technology

The application of these management measures has achieved good results, but there are also problems such as inconvenient daily operation and maintenance work, inadequate implementation of management measures, and inability to restrict malicious illegal operations by humans.

Images