Security operation and maintenance instruction blocking device and method based on industrial control system

Abstract

The invention relates to the field of industrial control system security defense, in particular to a security operation and maintenance instruction blocking device and method based on an industrial control system. The blocking method comprises the steps: an operation and maintenance terminal obtains an industrial control operation and maintenance instruction input by a user; an operation and maintenance gateway performs rule matching on the encrypted operation and maintenance instruction content and an instruction strategy locally bound to the operation and maintenance gateway; a matching result is output, and if the operation and maintenance instruction content is successfully matched with the instruction strategy, intercepting and blocking are carried out by the operation and maintenance gateway; if the matching is not successful, operation is carried out, and interception is not carried out; and the operation and maintenance gateway records a log and sends the log to an operation and maintenance terminal background for log auditing. According to the invention, the blocking of a risk instruction is realized, and the occurrence of equipment faults caused by misoperation of operation and maintenance personnel is prevented.

Description

technical field [0001] The invention relates to the field of security defense of industrial control systems, in particular to a device and method for blocking safe operation and maintenance instructions based on industrial control systems. Background technique [0002] With the accelerated integration of industrial control systems and information technology, the originally independent and closed industrial control systems began to use cloud computing, big data and other technologies for data storage and analysis. In this process, the industrial control system is faced with various threats from the external network, such as malicious intrusion, computer virus, network attack, etc. The security threats faced by the industrial control system are everywhere, which fully shows the information security of the industrial control system. realistic urgency. [0003] At present, when operating and maintaining related industrial control equipment, operation and maintenance operators u...

AI Technical Summary

Problems solved by technology

At present, when the maintenance of the industrial network is carried out, it is often directly connected to the operation and maintenance equipment for maintenance operations. If the maintenance personnel make misoperations or input risk instructions by mistake, it is very likely to cause network security accidents, or even cause equipment failures, and eventually lead to inevitable loss

Images