A proactive alarm network security system for industrial networks

Abstract

The invention discloses an active alarm network security system for an industrial network. The system comprises a network security management system, an agent API system and a machine language analysis system. In the invention, the industrial network may be an airplane network, a train rail network, an industrial control system network, a shared facility network, an intelligent building network, or a self-driving car network. The system actively protects industrial network systems of an airplane, a train, an industrial control system, a shared facility, an intelligent building and a self-driving car that live beyond the data center; the machine language analysis system is arranged in cloud, a machine language automatic update module is updated synchronously, and the machine language is updated timely due to a novel network virus, so that the novel network virus can be identified and alarmed in both offline and online states, and network security is improved greatly.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to an active alarm network security system for industrial networks. Background technique [0002] With the rapid development of the Internet in the world, due to the defects of network protection technology, attacks by viruses and hackers are also emerging one after another. Especially for industrial networks, it is necessary to strengthen security protection. Industrial networks include industrial networks for enterprises and industrial networks for rail transit. The network, for the industrial network used by enterprises, often involves important secrets and financial data of the enterprise. Once it is invaded, it will face heavy loss of confidentiality and capital loss; for the rail transit industrial network, it is oriented to a large number of users. , the account security of these users will be seriously threatened, resulting in serious property losses. I...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of the Internet in the world, due to the defects of network protection technology, attacks by viruses and hackers are also emerging one after another. Especially for industrial networks, it is necessary to strengthen security protection. Industrial networks include industrial networks for enterprises and industrial networks for rail transit. The network, for the industrial network used by enterprises, often involves important secrets and financial data of the enterprise. Once it is invaded, it will face heavy loss of confidentiality and capital loss; for the rail transit industrial network, it is oriented to a large number of users. , the account security of these users will be seriously threatened, resulting in serious property losses

In recent years, network security incidents have emerged one after another, and network security issues have received more and more attention. Network security technology has become the most important technical requirement for industrial Ethernet networks. However, the security protection of existing industrial networks mostly uses passive detection. Network intrusion cannot provide timely feedback, and network security supervisors are prone to unintentional omissions of faults, and cannot timely intercept intruding hackers, resulting in serious network security problems.

In addition, the existing network security system has a complex updating process and cannot be updated in time for new types of viruses, resulting in the security system being unable to protect the security of industrial networks against new types of attacks. Therefore, it is necessary to improve the existing industrial network security system , to strengthen the protection of industrial networks