Industrial internet data monitoring method, device, equipment and medium

Abstract

The embodiment of the invention discloses an industrial internet data monitoring method and device, equipment and a medium. The method comprises the following steps: acquiring abnormal industrial internet data which does not conform to industrial internet proprietary protocol rules from industrial internet data acquired from the industrial internet; analyzing each abnormal industrial internet data, obtaining an abnormal type corresponding to each abnormal industrial internet data, and tracing an industrial equipment identifier matched with each abnormal industrial internet data; and forming a data detection report according to the abnormal type and the industrial equipment identifier corresponding to each abnormal industrial internet data. According to the embodiment of the invention, the problem that real threats existing in the industrial control network cannot be accurately and effectively found out is solved, behavior management monitoring auditing of industrial internet equipment operation, network behaviors, intrusion detection and the like is realized, and the detection capability of continuously evolved advanced threats is improved.

Description

technical field [0001] The embodiments of the present invention relate to computer data processing technology, and in particular to a method, device, equipment and medium for monitoring industrial Internet data. Background technique [0002] In the past, the industrial control industry generally believed that an industrial control system based on a relatively isolated system deployment environment and multi-layer in-depth security protection measures could protect it from external attacks. easily overlooked. However, with the continuous development and integration of informatization and industrialization-related technologies, the introduction of open communication protocols, the development of intelligent terminal equipment, the increase in connections with other equipment / software, the enhancement of external connectivity, and the frequent occurrence of network attacks, etc. With the increase of factors, the security risk of industrial control system is increasing day by d...

AI Technical Summary

Problems solved by technology

Various detection technologies find possible security problems in the network from different angles, but cannot accurately and effectively find out the real threats in the industrial control network, and capture the communication behavior of the industrial production system, industrial control protocol vulnerabilities, abnormal events, and The authenticity of data, etc., lack of monitoring mechanisms for system misoperations and intentional sabotage, and lack of log audit and configuration change management. Even most industrial control systems do not have audit functions, or although they have audit functions, the performance requirements of the system Restricted the opening of the audit function

Images