Industrial control network security protection monitoring system

Abstract

An industrial control network security protection monitoring system performs real-time prevention and protection on industrial equipment of the industrial control network, and realizes network security protection monitoring through an acquisition layer, an analysis layer, a function layer and a display layer based on an integrated application platform, wherein the display layer mainly displays security trend, system topology and industrial control panorama; the acquisition layer comprises the acquisition of network data traffic and the recording of industrial control network operations; the analysis layer mainly comprises data processing, data association, data aggregation, data modeling, and integrated interfaces of other function modules; and the function layer mainly comprises monitoring audit, intrusion prevention, vulnerability mining, and data isolation. The system provided by the invention protects and protects industrial equipment in real time through the intelligent protectiontechnology of the industrial network control system, monitors and audits the data information of the entire industrial control network through the monitoring and auditing technology to prevent the industrial control network from being attacked externally, and can also have the vulnerability mining function of the industrial control network to escort the entire industrial control network security.

Description

technical field [0001] The invention relates to a monitoring system, in particular to an industrial control network safety protection monitoring system. Background technique [0002] Critical infrastructure systems are the foundation of large-scale industries such as manufacturing, transportation and energy. Technologies such as "Industrial Internet and Internet of Things" are widely used. Industrial control systems are becoming more and more complex and connected to more and more commercial and external networks. The industrial control network has developed from an independent network state to a network interconnected with the enterprise IT environment, and security issues have also increased. The numerous security risks in the industrial control system will increase the possibility of attacks. These attacks can be executed asynchronously and can last for a long time. A variety of loopholes in the industrial control network security protection monitoring system (hereinafter...

AI Technical Summary

Problems solved by technology

Although modern industrial control systems use the same communication protocols as IT business networks, the specific functional requirements of control systems (combining both operational and executable requirements) can render otherwise qualified security techniques ineffective

Some sectors, such as energy, transportation and process manufacturing industries, are extremely time-sensitive, so potential and throughput problems isolated by safety measures may cause unacceptable delays in the system, so that it cannot function properly

[0004] Modern network-based communication must solve security issues in the field of industrial control systems. The key network security issues in the field of industrial control are mainly as follows: backdoor programs within the network boundary; vulnerability of common communication protocols; lack of or no security protection for equipment; Attacks on field devices; database attacks; over-the-air interception of data communications and attacks in the middle; inappropriate or non-existent patching of software and firewalls; insecure programming; improper network security operations by internal and external individuals; lack of effective mitigation of control systems Risk technology Understanding system vulnerabilities and attack methods to overcome them is an effective measure to establish security defenses

Images