System and method for safety protection of industrial control equipment based on active immune mechanism

Abstract

The present invention relates to a security protection framework and method for industrial control equipment based on an active immunity mechanism. The specific method is to divide the security protection system of an information system into a trusted node computing environment, a trusted region boundary and a trusted computing framework based on active immunity. The three components of the trusted communication network are based on the trusted computing theory of active immunization, and the overall design is carried out from the two levels of relevant security technology and management methods, and the active immune protection that adapts to the industrial communication network scene is established in combination with the on-site industrial control system equipment system framework. The active immune industrial control security protection framework in the present invention adopts safe and efficient cryptographic algorithms, trusted control chips, trusted software and trusted network connections, and integrates active security strategy management and control systems to form a set of active immune information suitable for industrial control sites The security protection scheme provides a credible and safe operating environment for key equipment in the industrial control system network.

Description

technical field [0001] The invention relates to a method for designing a security protection framework of industrial control equipment based on an immune mechanism to provide a security protection mechanism for on-site industrial control equipment, and belongs to the field of industrial control network security. Background technique [0002] The architecture of the traditional industrial control network is mainly composed of various controllers (PLC, DCS, etc.), transmitters, sensors, actuators, historical databases, engineer stations, operator stations and other key control equipment for industry applications. To ensure the normal execution of production and control functions, it is necessary to ensure timely response and real-time data interaction, so it has not strengthened its information security protection capabilities. However, as a new generation of industrial control worms and attacks against industrial control networks have successively broken out in the on-site pe...

AI Technical Summary

Problems solved by technology

However, such products are often limited by their own design ideas, and it is difficult to deal with the new outbreak of attack methods such as advanced persistence using the logic design flaws of the program itself; in addition, build a sample library based on past attacks to perform feature comparison and killing This kind of passive response strategy is hard to guard against the endless new vulnerabilities and attack methods, which runs counter to the basic principles of information security; third, such products often lack effective supervision mechanisms, and are often designed to have the highest management authority of the system. If it is under control, it will become a springboard for intruders to launch network attacks. After being maliciously tampered with and downloaded, it will cause unpredictable losses and disasters.

Images