Dynamic control method and system for firewall of industrial control equipment

Abstract

The invention discloses a dynamic control method and system for a firewall of industrial control equipment, and the method comprises the steps: obtaining the safe operation state of an industrial control host and a firewall configuration application; when the safe operation state is safe, sending a first control instruction to the firewall according to the firewall configuration application; and when ending information for modifying the configuration operation of the industrial control equipment is obtained, sending a second control instruction to the firewall to indicate the firewall to forbid the modification operation on the parameter configuration of the industrial control equipment. By implementing the method and the device, the problems of failure of a firewall network security protection function and easy malicious damage to the industrial control system in related technologies can be solved, the configuration information of the industrial control equipment can be dynamically modified, the security of the industrial control equipment is effectively improved, and the security release of operation and maintenance operation is realized; the operation process of changing the security configuration and strategy of the industrial control equipment is standardized, so that the security operation and maintenance are transparent, standard and automatic, the working efficiency isimproved, and the business risk is reduced.

Description

technical field [0001] The invention relates to the field of industrial control, in particular to a dynamic control method and system for a firewall of an industrial control device. Background technique [0002] In the actual application scenarios of industrial control networks, security boundaries will be set at some important industrial control hosts or intranets, which are commonly referred to as industrial firewalls in industrial control networks. In general, industrial firewalls can solve basic network problems. For security issues, after the industrial control system goes online normally, for the sake of stability, the security configuration strategy of the industrial firewall and industrial control equipment will not be adjusted for a long period of time. [0003] However, when the production process is changed and optimized, the control logic in the industrial control equipment controller is adjusted, the number of I / O points in the control system is increased, the i...

AI Technical Summary

Problems solved by technology

[0004] Therefore, the technical problem to be solved by the present invention is to overcome the problem in the prior art that when modifying the configuration of the industrial control equipment, the path will be open for a long time, and any server can change the configuration of the industrial control equipment at will, resulting in the failure of the firewall network security protection function, and the industrial control system is attacked by worms, Defects of malicious damage of viruses, thereby providing a dynamic control method and system for firewalls of industrial control equipment

Images