Industrial control equipment safety protection system and method based on active immune mechanism

Abstract

The invention relates to an industrial control equipment safety protection framework and method based on an active immune mechanism. The method specifically comprises the following steps that under atrusted computing architecture based on active immunization, an information system safety protection system is divided into a trusted node computing environment, a trusted area boundary and a trustedcommunication network; based on the trusted computing theory of active immunization, overall design is carried out from two aspects of related safety technologies and management means, and an active immunization protection system framework adaptive to an industrial communication network scene is established by combining field industrial control system equipment. According to the active immune industrial control safety protection architecture, a safe and efficient cryptographic algorithm is adopted, and a trusted control chip and trusted software are connected with a trusted network; an activesafety policy management and control system is integrated to form a set of active immune information safety protection scheme suitable for an industrial control site, so that a trusted and safe operation environment is provided for key equipment in an industrial control system network.

Description

technical field [0001] The invention relates to a method for designing a security protection framework of industrial control equipment based on an immune mechanism to provide a security protection mechanism for on-site industrial control equipment, and belongs to the field of industrial control network security. Background technique [0002] The architecture of the traditional industrial control network is mainly composed of various controllers (PLC, DCS, etc.), transmitters, sensors, actuators, historical databases, engineer stations, operator stations and other key control equipment for industry applications. To ensure the normal execution of production and control functions, it is necessary to ensure timely response and real-time data interaction, so it has not strengthened its information security protection capabilities. However, as a new generation of industrial control worms and attacks against industrial control networks have successively broken out in the on-site pe...

AI Technical Summary

Problems solved by technology

However, such products are often limited by their own design ideas, and it is difficult to deal with the new outbreak of attack methods such as advanced persistence using the logic design flaws of the program itself; in addition, build a sample library based on past attacks to perform feature comparison and killing This kind of passive response strategy is hard to guard against the endless new vulnerabilities and attack methods, which runs counter to the basic principles of information security; third, such products often lack effective supervision mechanisms, and are often designed to have the highest management authority of the system. If it is under control, it will become a springboard for intruders to launch network attacks. After being maliciously tampered with and downloaded, it will cause unpredictable losses and disasters.

Images