A prototype modeling method of network security attack based on industrial control

Abstract

The invention discloses an industrial control network security method based on industrial network attack prototype modeling, which comprises the following steps: S1, industrial network security modeling and algorithm design; S2, designing an industrial control network security attack prototype; S3, taking an attack model of an attacker in an algorithm of the attack prototype in S1 as an attack source, and converting the network vulnerability information obtained in S4 into an attack set of an attacker according to attack rules to form an attack prototype; S4: Designing penetration test schemebased on attack prototype; 5, establishing a Sniffer network monitoring system; 6, optimizing and filtering that data through the external interface of the target industrial control network; 7, optimizing that topology structure of the intranet of the target industrial control network; S8: Establishing vulnerability risk assessment and modeling; S9: Forming an industrial network security defense solution. The network optimization and safety solution provided by the invention will effectively solve the safety problem of the industrial control of the enterprise, can timely carry out the risk assessment on the system, reduce the risk factors to the maximum extent, and improve the network operation efficiency and the safety reliability of the production management.

Description

technical field [0001] The invention relates to the fields of network security and information security, in particular to an industrial control-based network security attack prototype modeling method. Background technique [0002] The problem of industrial control network security originated in 2010, which started relatively late. State-owned enterprises such as the State Grid Corporation of China have just begun to study the application of industrial control network security issues, but small and medium-sized enterprises still lack awareness of industrial control security, and lack relevant technologies and capabilities. With the advancement of the integration of informatization and industrialization, the production and management of these enterprises, especially the safety of production control, will become a common problem. However, due to the different scales of enterprise networks and the cost of information security management, industrial control network security has no...

AI Technical Summary

Problems solved by technology

[0002] The problem of industrial control network security originated in 2010, which started relatively late. State-owned enterprises such as the State Grid Corporation of China have just begun to study the application of industrial control network security issues. However, small and medium-sized enterprises still lack awareness of industrial control security and lack relevant technologies and capabilities. With the advancement of the integration of informatization and industrialization, the production and management of these enterprises, especially the safety of production control, will become a common problem. However, due to the different scales of enterprise networks and the cost of information security management, industrial control network security has not been widely used. With the integration of industrialization and informatization, there is a big difference between the application level and management level of enterprise informatization, which leads to unclear boundaries between enterprise management network and industrial production control network, in a state of no isolation or limited isolation, and the risk of potential safety hazards is relatively large

[0003] Therefore, there is a need for a prototype modeling method for network security attacks based on industrial control, which is used to effectively solve the security problems of enterprise industrial control

Images