Studying and application of industrial control security monitoring system based on protocol deep analysis

Abstract

The invention relates to studying and application of an industrial control security monitoring system based on protocol deep analysis. The system comprises a front-end monitoring display module group,a middle-end communication module and a back-end processing module group; the front-end monitoring display module block is used for conducting direct control operation on the industrial system and monitoring the network communication flow of the overall system; the back-end processing module group is used for receiving, parsing and controlling an operation and maintenance monitoring operation instruction; and during operation, the front-end monitoring display module group initiates message synchronous data, is connected with the back-end processing module group through the middle-end communication module, receives and parses message information through the back-end processing module and informs the front-end monitoring display module group of a protocol communication result. According tothe system, By adopting a reverse analysis technology of private industrial control protocols and a trusted operation and maintenance management technology, security risks existing in the industrial control system are discovered and blocked in real time, and the urgent requirement of current enterprises on network content analysis and monitoring equipment is met.

Description

technical field [0001] The invention relates to the technical field of industrial control system safety monitoring, in particular to the research and application of an industrial control safety monitoring system based on protocol depth analysis. Background technique [0002] In recent years, with the gradual promotion and application of industrial Ethernet, more and more industrial control system products adopt general protocols, general hardware and general software, and are indirectly connected to public networks such as the Internet in various ways. security threats have gradually penetrated into the production control network. In order to improve the security protection capability of the power industry and strengthen the security protection of the power monitoring system, in 2014 the National Development and Reform Commission issued Order No. 14 "Regulations on the Safety Protection of the Power Monitoring System". Notice on Safety Protection Plan and Evaluation Specifi...

AI Technical Summary

Problems solved by technology

[0008] Rapid expansion of attack scope: Early attacks on industrial control systems deployed in critical infrastructure required strong attack capabilities; however, as the information security issues of industrial control systems became public, many hackers began to use attack tools easily available on the Internet , targeting many industries or companies that basically do not have information security protection capabilities, although there are no serious vicious incidents, it has caused serious economic losses

Images