Unidirectional safety detection and multi-factor weighted evaluation system for industrial control terminal equipment

Abstract

The invention discloses a one-way safety detection and multi-factor weighted evaluation system for industrial control terminal equipment. Comprising an index evaluation system construction module, an industrial control security data acquisition module and a security one-way communication module which are arranged on industrial control terminal equipment, security data one-way communication hardware arranged on an industrial control switch, and a multi-factor weighted evaluation module arranged on a security evaluation platform, one-way safety monitoring is realized through a one-way communication mode between the safety one-way communication module and the safety data one-way communication hardware, an attacker can be prevented from implementing reverse attack on industrial control equipment by using the safety detection and evaluation system, and the multi-factor weighted evaluation module is used for realizing combination with an aging factor and a detection time factor, so that the safety of the industrial control equipment is improved. And the safety of the equipment is comprehensively evaluated through the user safety demand factor, so that the aim of providing more comprehensive and accurate risk evaluation for the industrial control terminal equipment is fulfilled.

Description

technical field [0001] The invention belongs to the field of safety evaluation of industrial control terminal equipment, and in particular relates to a one-way safety detection and multi-factor weighted evaluation system for industrial control terminal equipment. Background technique [0002] With the rapid development of computer technology, industrial control systems that were originally isolated are connected to complex external network environments, resulting in endless attacks. As the core equipment for implementing specific business control in the industrial control system, industrial control terminal equipment will seriously threaten normal industrial production and even national security once it is attacked maliciously. The industrial control terminal equipment in the industrial control system pays special attention to the continuous trouble-free time and real-time performance of the business, and cannot take terminal security protection measures (such as anti-virus,...

AI Technical Summary

Problems solved by technology

[0003] The existing security risk assessment methods have the following problems: 1) The existing security detection and evaluation system may introduce a new attack surface, causing attackers to intrude into industrial control equipment through the detection system; 2) The evaluation results of time-sensitive industrial control detection data are inaccurate , such as system patches, industrial control services that need regular upgrades, industrial control applications, etc.; 3) Static assessments cannot continuously detect and analyze the security problems of industrial control equipment, such as advanced persistent threats lurking for a long time, and some combined attacks have long-term impact on security Impact; 4) Existing risk assessment schemes are usually fixed, difficult to adapt to different industrial control application scenarios, and cannot be flexibly adjusted according to user security needs

However, due to the judgment based only on the data flow, it is not comprehensive enough and the evaluation is inaccurate

Images