Security detection and monitoring system applicable to industrial control system

Abstract

The invention discloses a security detection and monitoring system applicable to an industrial control system. The security detection and monitoring system comprises a data collection module, a data storage module, a protocol analysis processing module, a malicious code detection module, a traffic statistical module, a traffic feature recognition module, an audit report generation module and a monitoring learning module; the protocol analysis processing module receives and analyzes data to be detected; the data to be detected is stored in the data storage module; the malicious code detection module recognizes malicious code information; the traffic statistical module makes statistics on traffic data information of the data to be detected after analysis; the traffic feature recognition module recognizes traffic feature information of the traffic data information; the audit report generation module generates an audit report and sends the same to an audit office; and the monitoring learning module acquires a final audit result according to the audit report and a processing result of the audit office. According to the system provided by the invention, the security state of the industrial control system can be monitored, the network security protection capacity of the industrial control system can be enhanced, and the labor cost can be reduced.

Description

technical field [0001] The invention relates to the technical field of safety monitoring of industrial control systems, in particular to a safety detection and monitoring system suitable for industrial control systems. Background technique [0002] The power monitoring system is a business system or intelligent device based on computer and network technology for monitoring and controlling the power production and supply process, and can be used as the basic support for communication and data networks. Most of the industrial control systems such as electric power monitoring are closed industrial control systems, especially the industrial control systems installed in substations and power plants. This makes the network attack detection of this type of industrial control system very different from the traditional network. [0003] The inventor found in the process of implementing the present invention that the existing indoor substation has the following technical problems: ...

AI Technical Summary

Problems solved by technology

[0004] The detection equipment on the market is aimed at the whole society, government or enterprises. The detection technology and methods are relatively popular. For the industrial control system of the power grid company, it is not targeted; the industrial control system is not connected to the external network and does not need to target the URL accessed in the network. and email attachment detection

Images