Host security fine management and control system of industrial control system
By constructing an enhanced host agent client and a multi-engine collaborative architecture, several shortcomings in the host-level security protection of Emerson industrial control systems were addressed. This resulted in comprehensive and efficient log collection, refined baseline verification, precise account management, and accurate alarms, thereby improving the system's security incident response efficiency and protection capabilities.
Patent Information
- Application Number
- CN202511799623.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-12-02
- Publication Date
- 2026-04-14
AI Technical Summary
The existing security protection of Emerson industrial control systems at the host level suffers from problems such as limited log collection scope, data redundancy, insufficient baseline verification, rough account status management, numerous false alarms, and lack of third-party linkage mechanisms, resulting in low efficiency in responding to security incidents.
An enhanced host agent client and a multi-engine collaborative architecture are built to achieve comprehensive log collection, efficient data processing, refined baseline verification, precise account control, and intelligent alarm filtering. This includes a security dashboard, log analysis unit, security alarm unit, peripheral management unit, log aggregation engine, security baseline verification engine, user status management engine, and alarm optimization engine. It supports multi-protocol transmission and third-party log forwarding. The enhanced host agent client is compatible with the original Emerson Host Security Guard.
It enhances host security protection capabilities, boasts strong compatibility, comprehensive and efficient log collection, refined baseline verification, good security ecosystem linkage, precise account management, and high alarm accuracy, thereby reducing the burden of operation and maintenance and improving the efficiency of security incident handling.