Software updating method and device based on white list mechanism and medium

Abstract

The invention discloses a software updating method and device based on a white list mechanism and a medium, and relates to the field of software updating. A first instruction is sent to a first client, so that the first client executes a preset update file and generates a hash value and update file information; generating a white list updating strategy according to the received hash value and the updating file information; and issuing the white list updating strategy to other clients, so that the clients update the white list according to the white list updating strategy and update the preset updating file. Therefore, in the technical scheme, one client is allowed to update and upgrade in advance, and the information of the update file is obtained to generate the white list update strategy and issue the white list update strategy to other clients; and other clients update the white list according to the white list updating strategy, so that the white list contains the information of the updating file, and software updating can be realized through matching with the white list during updating.

Description

technical field [0001] The present application relates to the field of software update, in particular to a software update method, device and medium based on a whitelist mechanism. Background technique [0002] The white list of industrial control hosts is a common host protection software in the industrial control environment in the market, which consists of a client and a server. The white list client of the industrial control host usually runs in the Windows system, and uses the white list mechanism for protection. It scans all the file hash values ​​(HASH) and adds them to the white list. After entering the protection mode, the white list of the industrial control host monitors system file execution. Action, and match the executed file with the white list. If the match fails, it means that the file is an unauthorized file from outside, and the system will block it, so as to avoid the risk of foreign malicious program intrusion. In this mode, the software and operating s...

AI Technical Summary

Problems solved by technology

This method needs to close the security policy first, which may bring security risks at this stage

At the same time, the administrator needs to manually re-scan the operation. If a large number of hosts need to be updated, it will require a lot of labor, and the system resource consumption will be large during the scanning process, which will affect the production business

[0003] Due to the above reasons, in the application scenario of the existing industrial control host whitelist, it is usually difficult for users to perform timely software and system updates, unable to use the functions of the new version of the software, and may be affected by the defects and risks of the old version of the software

Images