A security baseline verification system and method based on industrial control protocol

Abstract

The invention discloses a safety baseline checking system and method based on an industrial control protocol. The checking system includes an analysis module, a checking template obtaining module, a checking initial checking module and an operation monitoring module. After the packet is packaged, the data packet to be detected is parsed according to the industrial control protocol corresponding to the data packet to be detected to obtain the data to be detected, and the verification template acquisition module acquires the baseline verification template corresponding to the type of the data to be detected from the security baseline database , the baseline check template includes several baseline check items and their corresponding parameter thresholds, the baseline check items include an initial baseline check item and an expanded baseline check item, and the number of the initial baseline check items is greater than or equal to 1, so The above-mentioned initial check module checks the data to be checked according to the baseline check items of the baseline check template.

Description

technical field [0001] The invention relates to the technical field of industrial control, in particular to a security baseline checking system and method based on an industrial control protocol. Background technique [0002] Security baseline refers to the agreed rules that need to be met in order to achieve the most basic security requirements on an information system. Reviewing security baselines can help reduce security issues in information systems caused by inadequate security controls. However, with the rapid development of information systems, the configuration of parameters on information systems is becoming more and more complex, and parameter mismatch is easy to occur, which affects the security of information systems, because it is very important to check the security baseline in advance. [0003] In the prior art, the contents of the check items of the security baseline remain basically unchanged, which cannot satisfy the detection of increasingly complex param...

AI Technical Summary

Problems solved by technology

However, with the rapid development of information systems, parameter configurations on information systems are becoming more and more complex, and parameter mismatches are prone to occur, which affects the security of information systems, because it is very important to check the security baseline in advance

[0003] In the existing technology, the content of the verification items of the security baseline remains basically unchanged, which cannot satisfy the detection of increasingly complex parameter configurations

Images