A method and system for generating security policy against attack for a controller

Abstract

The invention provides a method for generating anti-attack security policy of a controller, which is applied to the controller. The method comprises the following steps: analyzing security configuration information in a received configuration engineering file to form a network structure diagram; traversing the network structure diagram and establishing the communication relationship between the controller and the target network terminal; obtaining attribute information of a target network terminal by using the communication relationship; based on the attribute information, generating a security policy. It can be seen that the controller generates its own security policy, and the granularity of security protection is smaller, that is, the degree of security refinement is higher, so as to improve the reliability of security protection of the controller and avoid the existence of security loopholes. Moreover, the controller can be protected without the prior art equipment, and the cost isreduced. The invention also provides a method for generating anti-attack security policy of a controller, a controller and a computer-readable storage medium, all of which have the above beneficial effects.

Description

technical field [0001] The application relates to the field of industrial control network security protection, and in particular to a method for generating a controller anti-attack security policy, a system for generating a controller anti-attack security policy, a controller, and a computer-readable storage medium. Background technique [0002] The distributed control system has a wide range of applications, and is mainly used in various industries such as steel, petroleum, chemical industry, electric power, building materials, machinery manufacturing, automobiles, textiles, transportation, and environmental protection. Distributed control systems impose strict requirements on the deterministic execution time of programs. And in any case, the accuracy of the controller IO input, IEC operation, and IO output cycle should be guaranteed. [0003] The controller is the core of the distributed control system, and once it encounters a fault, it will cause significant loss of lif...

AI Technical Summary

Problems solved by technology

[0004] In order to ensure the security of the controller, most manufacturers usually deploy devices such as firewalls, network-managed switches or routers on site, and use the security policies in these devices to defend the border of the controller in units of regions. Since there are multiple controllers in each area, the granularity of security protection is large, the reliability of security protection is low, and security vulnerabilities are prone to exist.

Images