Program white list generation method and device and program updating method and device

Abstract

The invention discloses a program white list generation method and device and a program updating method and device, and the method comprises the steps: monitoring a target file storage directory basedon a file change notification mechanism, scanning a newly-built file for verification when the information of the newly-built file is monitored, and updating the newly-built file when the newly-builtfile passes the verification; extracting file feature information; and generating trust installation program information according to the file feature information. The problem of potential safety hazards caused by the fact that the industrial control host updates a program update package without checking the program update package is solved, the security of the program update package is ensured by automatically scanning the newly-built file and searching and killing a virus Trojan, and the propagation of the virus Trojan in an industrial control network is avoided; and the full-automatic processing flow of the program from downloading to installation in the program white list control mode is realized, and the safe updating of the program is realized on the premise of not changing the usehabit of the user.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method for generating a program whitelist, a method for updating a program and a device. Background technique [0002] With the rapid development of network technology, the application of network in industrial control system is becoming more and more extensive. In industrial control system, the program is an essential part of the normal operation of the industrial control system. However, whether it is a large program or a small application, There will always be bugs or new function extensions. The same is true for industrial configuration programs or programming programs. At this time, the program needs to be updated. [0003] The update of the industrial configuration program is generally installed locally on the industrial host through a U disk or CD, but because some of the existing security update programs may be directly or indirectly "polluted", such as infected with viru...

AI Technical Summary

Problems solved by technology

[0005] Therefore, the technical problem to be solved by the present invention is to overcome the lack of strict control of the update program by the operation and maintenance administrator in the prior art, and the server side does not perform security verification or verification on the update package, which will cause the update to carry malicious software. Programs or virus programs, which bring unpredictable risks and hidden dangers, thus providing a method for generating a program whitelist, a program update method, and a device

Images