Hidden danger checking method and device based on industrial equipment system

Abstract

The embodiment of the invention discloses a hidden danger checking method and device based on an industrial equipment system. The method comprises the following steps: constructing a vulnerability patch library and a configuration standard library; acquiring configuration information of equipment and an operating system; performing configuration checking on the configuration information according to the configuration items to obtain an information set of the configuration items; sorting out a hidden danger setting parameter set of the configuration item according to the information set; according to the hidden danger parameter set of the configuration items, whether hidden danger parameters exist in the configuration information of the to-be-tested equipment/system or not is judged, and if potential safety hazards exist, summarizing prompting is carried out, and prompt item information convenient for an equipment user to carry out optimization is displayed; the method has the beneficial effects that on one hand, the configuration information of the industrial equipment and the system is acquired, and on the other hand, the hidden danger setting parameter set is introduced, so that an equipment user is quickly and intuitively prompted to know which hidden danger configuration exists in the equipment, and the industrial production environment is prevented from being invaded or damaged.

Description

technical field [0001] The invention relates to the technical field of industrial equipment information security, in particular to a method and device for troubleshooting hidden dangers based on an industrial equipment system. Background technique [0002] With the informatization and platformization of industrial control systems, hidden dangers of network security have also been brought into industrial control systems. For example, including the existence of some dangerous configurations and loopholes, which makes the threats continue to intensify. Attacks on industrial control systems or Internet of Things devices may disrupt the normal monitoring and control of important equipment and the normal operation of the system, and the resulting consequences will be disastrous. [0003] In the prior art, most of them rely on the operator to check the configuration items of the system. This method relies on the operator's personal ability, the elimination efficiency is low and th...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, most of them rely on the operator to check the configuration items of the system. This method relies on the operator's personal ability, the elimination efficiency is low and the effect is unstable, and the inspection results obtained by different personnel are different, and this This method can not be very intuitive to see what hidden dangers exist in the equipment

Images