A non-embedded probe-based method for cross-domain functional safety anomaly detection and traceability

Abstract

The present invention proposes a non-embedded probe-based cross-domain functional safety anomaly detection and traceability method, the steps are as follows: first step, a non-intrusive cross-domain monitoring probe for network mirroring is constructed on the core network device of the network collaborative manufacturing platform, Effectively collect all kinds of abnormal data associated with functional safety without affecting the normal business operation of the collaboration platform. In the second step, through the establishment of timely data information trace storage of data collected by each node based on the distributed consensus mechanism, a multi-node distributed consensus alliance trust group is established in turn. After the verification is passed, the nodes use the consensus mechanism to add the security interaction information to Locally stored data collection completes the sharing of security interaction information; the third step is to conduct real-time perspective monitoring correlation analysis on multi-dimensional data of packets, streams, files, protocol metadata, network behaviors, and file behaviors through deep intelligent correlation analysis technology And comparative analysis matches with abnormal functional safety model.

Description

technical field [0001] The invention belongs to the field of inter-domain heterogeneous IT / OT network collaboration of information security, and specifically relates to a non-embedded probe-based cross-domain functional safety anomaly detection and traceability method. Background technique [0002] Collaborative manufacturing is a modern manufacturing model in the 21st century. Collaborative manufacturing refers to the use of advanced network technology and information technology to transform the serial manufacturing process into a parallel manufacturing process to realize design, manufacturing, management, business, etc. within the supply chain and across supply chains. The cooperative production model finally achieves the goal of efficient resource utilization by changing the business model. However, in the network collaborative manufacturing scenario, due to the wide variety of cross-domain devices and systems and complex device connection relationships, the collaborative...

AI Technical Summary

Problems solved by technology

[0004] The invention solves the problem by overcoming the deficiencies of the existing technology, aiming at that in the process of network collaborative manufacturing, it is difficult to reuse and utilize a large number of special equipment / system abnormality monitoring tools customized in the traditional design and manufacturing fields, and accurately record the abnormal data generated by cross-domain entities In order to deal with problems such as complexity and difficulty in traceability, a cross-domain functional safety anomaly detection and traceability method based on non-embedded probes and distributed consensus is proposed. Under the premise of the normal business operation of the collaborative platform, effectively collect various abnormal data associated with functional safety; through the establishment of an alliance group based on a distributed consensus mechanism, collect the network data of each node in the IT information network layer, OT center control layer, and OT equipment layer. Store the data information in a timely manner; use the data that has been uploaded to the chain to perform multi-dimensional correlation data detection and analysis, realize the precise positioning of functional safety anomalies, and efficiently trace the source of functional safety anomalies in the collaborative network

Images