Industrial control protocol honey pot with self-learning function oriented to industrial internet and application

Abstract

The invention belongs to the technical field of the network security, and provides an industrial control protocol honey pot with a self-learning function oriented to the industrial internet, and an application. The honey pot comprises an interface module, an access request processing module, a self-learning module, and a data storage module. A standard interface required by the industrial internetcorresponding to the current honey pot is realized through the interface module. When the malicious attack invades, the honey pot receives a malicious program according to different communication protocol, thereby trapping the malicious program to regard that the honey pot is the real industrial control equipment; an access request processing module receives and analyzes an access request so as to judge whether the honey pot can respond to the received access request at present, if the honey pot cannot respond, the access request is submitted to the self-learning module, and a corresponding response is acquired and stored through a self-learning method, thereby deeply simulating the scanned real industrial control equipment; at last, the data storage module is responsible for analyzing and processing the space address and the network data flow, thereby analyzing the malicious behavior therein.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to an industrial Internet-oriented industrial control protocol honeypot with a self-learning function and its application. Background technique [0002] In recent years, great changes have taken place in the field of cyberspace security, and industrial control systems have become one of the new main battlefields of cyberspace security. After the integration of industrialization and industrialization, the information security of IT systems has also been integrated into the security of industrial control systems. At present, the network security situation faced by my country's critical information infrastructure is severe and complex. [0003] There are a large number of industrial control systems exposed on the Internet in the world, and a large proportion of them include the power industry, petroleum and petrochemical industries, and advanced manufacturing indu...

AI Technical Summary

Problems solved by technology

Although scholars at home and abroad use different honeynets to solve network security problems, the current honeynets are mainly used for network intrusion and malicious code detection, malicious code sample capture and botnet tracking, etc., and attacks against industrial control systems are more complicated. , there are few honeynets dedicated to industrial control networks

Images