Security defense method and system for industrial control system network

Abstract

The present invention provides a security defense method for an industrial control system network. The industrial control system network includes a shared network module and an industrial control network module. The security defense method includes the following steps: establishing a management center module in the shared network module; The management center module performs security management on multiple grading systems in the shared network module; a trusted security module communicating with the management center module is established in the industrial control network module; the trusted security module controls all rating systems The above-mentioned industrial control network module conducts trusted defense. The invention also provides a security defense system for the industrial control system network. The security defense method and system of the industrial control system network provided by the present invention realizes the transformation of the defense method from passive "blocking and killing" to active immunity, and can effectively resist organized attacks while meeting the requirements of high real-time and high reliability. , Targeted attacks.

Description

【Technical field】 [0001] The invention relates to the technical field of industrial control systems, in particular to a security defense method and system for an industrial control system network. 【Background technique】 [0002] With the rapid development of Internet technology and Internet of Things technology, OT (Operational Technology, operational technology), IT (Information Technology, information technology) and CT (Communication Technology, communication technology) are increasingly integrated, and the era of industrial Internet has arrived. More and more industrial control systems (ICS, Industrial Control System) of nuclear power plants that used to be "islanded" are connected to the enterprise internal network or the Internet, and the security risks of ICS systems (referred to as industrial control systems) are increasingly emerging. , its internal communication protocol, operating system, safety management strategy and management process, and application software ...

AI Technical Summary

Problems solved by technology

[0005] There are also some problems in the existing intelligent dynamic defense: firstly, the protection effect of intelligent dynamic defense is still uncertain; secondly, intelligent dynamic defense needs to collect large-scale data for deep learning model design, which brings design, size, and cost , power consumption, maintenance complexity and other aspects increase; finally, the realization of intelligent dynamic defense depends on the diversification of software and hardware components and the diversified supply level

Images