Industrial Internet security supervision system and method based on SD-WAN

Abstract

The invention discloses an industrial Internet security supervision system based on an SD-WAN. The industrial Internet security supervision system includes an industrial enterprise client terminal, anSD-WAN controller and an industrial Internet safety monitoring data center. Firstly, industrial Internet traffic is screened according to an exit data stream of an industrial enterprise client through a data screening module; industrial internet flow is screened out and is identified, analyzed and restored through the data processing module; data log information is generated, then the data log information is compressed and encrypted through a data compression module and a data encryption module in sequence, and finally the processed data is directly transmitted to an industrial internet security monitoring data center through a VPN channel to be processed and analyzed. Specific industrial internet flow is screened out through the industrial terminal and directly transmitted to the industrial internet safety supervision data center through the VPN channel, and accurate and effective flow, on-demand starting, safe transmission and flexible and simple deployment are achieved.

Description

Technical field [0001] The invention relates to the field of industrial Internet safety supervision, and in particular to an SD-WAN-based industrial Internet safety supervision system and method. Background technique [0002] In recent years, cyber security threats have accelerated to the industrial field, and industrial Internet security incidents have occurred frequently, affecting the normal operation of the economy and society and national security. The successive incidents of Ukrainian network disconnection, the paralysis of the domain name system of Dyn in the United States, and the "eternal blue" virus raging around the world have already sounded alarm bells for us. [0003] With the continuous emergence of emerging business scenarios such as the Internet of Things and Industrial Internet, the network is facing demands for openness, integration, intelligence, and personalization. In November 2017, my country issued the "Guiding Opinions on Deepening the "Internet + Advanced...

AI Technical Summary

Problems solved by technology

[0004] In order to realize the security supervision of the Internet, the architecture of the traditional solution is to transmit the traffic to the front-end traffic processing equipment of the industrial Internet by means of link splitting and mirroring traffic, and identify the relevant traffic of the industrial Internet from the massive traffic. , analysis, restoration and other operations, and cooperate with the back-end application system to realize the security supervision of the industrial Internet, but this method has disadvantages such as difficult to achieve accurate management, high technical risk, inflexible supervision, difficult construction, and high construction cost

Images