A method and a system for defending network storm based on controller

Abstract

A method for defending network storm based on a controller is provided. The method includes receiving data packet sent by a network terminal; calculating the data amount of the network terminal by using the data packet; judging whether the data amount is greater than a preset data amount threshold value; if so, cutting off the communication relationship between the controller and the network terminal. It can be seen that the controller can directly defend the network storm, and the granularity of security protection is smaller, that is, the degree of security refinement is higher, thus improving the reliability of security protection of the controller, avoiding the existence of security loopholes, and not easy to be eavesdropped or counterfeited. Moreover, the controller can be protected without the prior art equipment, and the cost is reduced. The present application also provides a system for defending network storm based on a controller, a controller and a computer-readable storagemedium, all of which have the above-mentioned beneficial effects.

Description

technical field [0001] The present application relates to the field of industrial control network security protection, in particular to a controller-based method for defending against network storms, a controller-based system for defending against network storms, a controller, and a computer-readable storage medium. Background technique [0002] With the development of network technology, industrial Ethernet has been widely used in distributed control systems, and switches are generally used in distributed control systems to build real-time data networks. The biggest risk of Ethernet is the occurrence of network storms, resulting in network performance degradation, or even network paralysis, causing the controller to crash and cause the unit to trip. Among them, the network storm is due to network topology design and connection problems, or network viruses, hacker attacks and other reasons that cause a large amount of replicated and disseminated data in the network, which ca...

AI Technical Summary

Problems solved by technology

[0005] In order to ensure the security of the controller, most manufacturers usually deploy devices such as firewalls, network-managed switches, or routers on site to protect the controller from network storms on a regional basis. There are multiple controllers in each area, resulting in large granularity of security protection, low reliability of security protection, and prone to security loopholes

Images