Rapid construction method of program white list

Abstract

A quick construction method for a program white list comprises the specific steps that firstly, a reading unit reads a language instruction of a target program, and a first language instruction is obtained; step 2, the integration unit normalizes the first language instruction to obtain a second language instruction; step 3, a segmentation unit performs segmentation extraction on the second instruction to obtain a segmentation instruction; step 4, confirming the obtained primary segmentation instruction by a verification unit, and judging whether the target program is an available program or not; 5, the database stores available programs in the target programs in a program white list of the database, and the program white list is obtained. According to the method, the target program is classified and segmented, and then whether the target program is the available program or not is determined, so that whether the target program is the available program or not is quickly judged, and the construction time of the program white list is shortened.

Description

technical field [0001] The invention relates to the technical field of measurement, and more particularly, to a method for rapidly constructing a program whitelist. Background technique [0002] With the advent of the era of Industry 4.0 and the "integration of industrialization and industrialization", industrial control systems are becoming more and more important in industrial informatization, and are widely used in high-end manufacturing, electricity, energy, transportation, water conservancy, etc. an important part of the information system. At the same time, it has also become the target of international hostile forces and hackers. [0003] At the current stage, in addition to attacking through ports, hackers use the intranet to achieve normal operation of the industrial control system. Hackers are more likely to attach attack instructions to the industrial control equipment or server in the industrial control system. After the application, the attack on the industria...

AI Technical Summary

Problems solved by technology

[0003] At the current stage, in addition to the hacker attack method through the port to achieve the attack intention, for the industrial control system that realizes the normal operation of the industrial control system through the intranet, the hacker mostly attaches the attack command to the industrial control device or server in the industrial control system. After the application program, the attack on the industrial control system is realized, causing immeasurable impact and loss on the industrial control system

Images