Method and system for generating controller anti-attack security policy

Abstract

This application provides a controller anti-attack security policy generation method, which is applied to the controller, including: analyzing the security configuration information in the received configuration project file to form a network structure diagram; traversing the network structure diagram to establish a control The Unicom relationship between the device and the target network terminal; use the Unicom relationship to obtain the attribute information of the target network terminal; generate a security policy based on the attribute information. It can be seen that the controller itself generates a security policy, and the granularity of security protection is smaller, which means that the degree of security refinement is high, thereby improving the reliability of the security protection of the controller and avoiding security loopholes. Moreover, the controller can be protected without the equipment in the prior art, which reduces the cost. The present application also provides a security policy generation system for controller attack prevention, a controller, and a computer-readable storage medium, all of which have the above beneficial effects.

Description

technical field [0001] The application relates to the field of industrial control network security protection, and in particular to a method for generating a controller anti-attack security policy, a system for generating a controller anti-attack security policy, a controller, and a computer-readable storage medium. Background technique [0002] The distributed control system has a wide range of applications, and is mainly used in various industries such as steel, petroleum, chemical industry, electric power, building materials, machinery manufacturing, automobiles, textiles, transportation, and environmental protection. Distributed control systems impose strict requirements on the deterministic execution time of programs. And in any case, the accuracy of the controller IO input, IEC operation, and IO output cycle should be guaranteed. [0003] The controller is the core of the distributed control system, and once it encounters a fault, it will cause significant loss of lif...

AI Technical Summary

Problems solved by technology

[0004] In order to ensure the security of the controller, most manufacturers usually deploy devices such as firewalls, network-managed switches or routers on site, and use the security policies in these devices to defend the border of the controller in units of regions. Since there are multiple controllers in each area, the granularity of security protection is large, the reliability of security protection is low, and security vulnerabilities are prone to exist.

Images