A method and device for risk detection of usb device access based on distributed accounting
A technology for equipment access and risk detection, applied in the nuclear power and electric power fields, it can solve the problems of difficult centralized management and correlation analysis, and inability to accurately analyze the attack entrance, and achieve the effect of providing reliability and ensuring anti-tampering.
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0041] The embodiment of the present invention provides a USB device access risk detection method based on distributed accounting, see figure 1 , the method includes:
[0042] S1. When a USB device is connected, identify the record information of the USB device connected;
[0043] S2. Store the record information locally, and store it in a different place synchronously;
[0044] S3. Perform risk detection on the connected USB device according to the recorded information and the device authorization table; the device authorization table is pre-stored locally and synchronously stored in a different place.
[0045] It should be noted that when the business systems in power systems and nuclear power industry substations and their power plants are connected to USB devices due to functional requirements such as system upgrades and business data transfers, the record information for identifying the USB device access, the record The information is generally an access log of the USB ...
Embodiment 2
[0064] An embodiment of the present invention provides a USB device access risk detection device based on distributed accounting, which can realize all the processes of the above-mentioned USB device access risk detection method based on distributed accounting, see figure 2 , the device includes a USB device access detection recording module 1, a local distributed accounting storage module 2, a USB device access analysis module 3 and a distributed accounting data synchronization module 4:
[0065] The USB device access detection recording module 1 is used to identify the record information of the USB device access when the USB device is connected, and send the record information of the USB device to the local distributed accounting storage module 2;
[0066] The local distributed accounting storage module 2 is used to store the record information of the USB device, the preset device authorization table and the information synchronized by the distributed accounting data synchr...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 

