Industrial internet terminal encrypted traffic data security detection method, device and equipment

Abstract

The invention provides an industrial internet terminal encrypted traffic data security detection method, device and equipment, and the method comprises the steps: carrying out the mirroring storage of traffic data interacted between an industrial internet terminal and target equipment if a proxy service request sent by a traffic proxy relay client is received; based on the traffic data stored in the mirroring manner, if the traffic feature corresponding to the traffic data is matched with the traffic feature in a configured traffic feature library, determining the traffic data as the traffic data of potential sensitive operation; for the traffic data of the potential sensitive operation, inputting the traffic data to a first classifier to obtain a first classification result; and determining that the traffic data has sensitive information based on the first classification result, or determining that the traffic data does not have sensitive information based on the first classification result. Through the technical scheme of the application, the traffic data with the sensitive information can be found in time, so that the leakage of the sensitive information is avoided or reduced, and the data security problem is solved.

Description

technical field [0001] The present application relates to the technical field of information security, in particular to a method, device and equipment for security detection of industrial Internet terminal encrypted traffic data. Background technique [0002] The Industrial Internet is a new type of infrastructure, application model and industrial ecology that is deeply integrated with the new generation of information and communication technology and the industrial economy. Through the comprehensive connection of people, machines, things and systems, a new manufacturing and The service system provides a way to realize the digital, networked and intelligent development of the industry and even the industry. The industrial Internet is an important cornerstone of the fourth industrial revolution. [0003] Industrial Internet terminals are devices that access the Industrial Internet through wired or wireless methods, and have the characteristics of various types, functions, and...

AI Technical Summary

Problems solved by technology

However, the rapid development of the industrial Internet has also brought about security issues

For example, industrial Internet terminals will collect and store a large amount of sensitive information. When such sensitive information is leaked to a third party, it will cause the leakage of sensitive information and cause data security issues. Therefore, timely detection of data security issues on industrial Internet terminals, especially The leakage of sensitive information is very important, but in related technologies, there is no effective way to discover the leakage of sensitive information

Images