An industrial control system security management method and system, and a readable storage medium

Abstract

The application discloses an industrial control system safety management method and system and a readable storage medium, which are applied to a computer device, a preset test file set corresponding to a to-be-tested industrial control system is acquired, the to-be-tested industrial control system comprises a plurality of to-be-tested functions, the plurality of to-be-tested functions are tested according to the preset test file set, a test success rate of each to-be-tested function is obtained, a test score of each to-be-tested function is determined according to the test success rate of each to-be-tested function, a test result of each to-be-tested function is calculated according to a preconfigured weight coefficient, and finally, a safety test result of the to-be-tested industrial control system is obtained. By using the industrial control system safety management method provided in the application, whether the current industrial control system is stable can be directly understood through the safety test result of the to-be-tested industrial control system, and the stability and safety of operation of the industrial control system can be improved.

Description

Technical Field

[0001] This application belongs to the field of industrial control system management, and in particular relates to a method, system and readable storage medium for industrial control system security management. Background Technology

[0002] As one of the most important technologies in the modern manufacturing field in the 20th century, industrial control technology plays a huge role in increasing output, improving quality, reducing consumption and ensuring safety. Industrial control systems are widely used in industries such as rail transportation, drones, and special equipment. More and more industries have eliminated manual participation in production and adopted automated control equipment for production management.

[0003] Currently, a large number of industrial control systems (ICS) are used in various stages of industrial production. While this greatly improves operational efficiency, if any part of the ICS malfunctions, especially in the face of external network attacks, and if the inability to quickly and accurately detect the malfunction can lead to a catastrophic chain reaction, the security and stability of industrial control systems are paramount. However, current industrial control systems primarily rely on human operation and control, which is inefficient and lacks stability. Summary of the Invention

[0004] The present invention aims to provide a method, device, and readable storage medium for security management of industrial control systems, thereby solving the technical problem of uncertain stability of industrial control systems in the prior art and realizing security management of industrial control systems.

[0005] This invention provides a security management method for industrial control systems, applied to computer equipment, specifically including the following steps:

[0006] Obtain the set of preset test files corresponding to the industrial control system under test, which includes multiple functions to be tested;

[0007] Based on a pre-set set of test files, multiple functions to be tested are tested to obtain the test success rate of each function.

[0008] The test score for each function to be tested is determined based on its test success rate.

[0009] The test result for each function under test is calculated based on the test score of each function under test and the pre-configured weight coefficient of each function under test.

[0010] Based on the results of each function to be tested, the security test results of the industrial control system to be tested are calculated.

[0011] Preferably, the multiple functions to be tested include data modification functions, and the preset test file set includes multiple preset test files. Based on the preset test file set, the multiple functions to be tested are tested to obtain the test success rate of each function, including:

[0012] Obtain the data modification command, the user information corresponding to the data modification command, and the modification permission flag of the target preset test file, wherein the target preset test file is any one of multiple preset test files;

[0013] Determine whether the change permission flag of the target preset test file indicates that change is allowed;

[0014] If the permission flag indicates that changes are allowed, then determine whether the edit status flag indicates that editing is in progress, and whether the user information configuration has the permission to change data.

[0015] If the editing status indicator indicates that editing is in progress, and the user information is configured with data modification permissions, then determine whether the data modification instruction meets the preset data modification instruction.

[0016] If the data modification command satisfies the preset data modification command, then release the modification permissions for the target preset test file;

[0017] Based on the modification permissions of the target preset test file, execute the data modification command to complete the data modification of the target preset test file;

[0018] Repeat the above steps until multiple preset test files have completed the test of the data change function, and obtain the test success rate of the data change function.

[0019] Preferably, the multiple functions to be tested include a file archiving application function. The preset test file set includes multiple preset test files. Based on the preset test file set, the multiple functions to be tested are tested to obtain the test success rate of each function to be tested, including:

[0020] Obtain the sealing application instruction and the first file status identifier of the target preset test file. The first file status identifier is used to characterize the completion status and archiving status of the target preset test file. The target preset test file is any one of multiple preset test files.

[0021] Determine whether the status identifier of the first file indicates that archiving has been completed; if the status identifier field of the first file indicates that archiving has been completed, execute the archive file request instruction to complete the archive of the target prediction file;

[0022] If the status identifier of the first file does not indicate that archiving has been completed, then determine whether the status identifier of the first file indicates that it is pending inspection.

[0023] If the status identifier of the first file indicates that it needs to be checked, then the target prediction file needs to be checked.

[0024] If the first file status identifier does not indicate that it is to be inspected, then the first file status identifier is updated to indicate that it is to be inspected.

[0025] Repeat the above steps until multiple preset test files have completed the test of the file archive application function, and obtain the test success rate of the file archive application function.

[0026] Preferably, the multiple functions to be tested include a return application function, and the preset test file set includes multiple preset test files. Based on the preset test file set, the multiple functions to be tested are tested to obtain the test success rate of each function, including:

[0027] Obtain the file modification command, the second file status identifier, and the target preset test file. The second file status identifier is used to represent the modification permissions of the target preset test file. The target preset test file can be any one of the multiple preset test files.

[0028] Determine if the second file status indicator indicates that it has been checked and archived. If the file status indicator indicates that it has been checked and archived, execute the return request function. If the second file status indicator does not indicate that it has been checked and archived, determine if the second file status indicator indicates that it is not started. If the second file status indicator indicates that it is not started, end access. If the second file status indicator does not indicate that it is not started, determine if the second file status indicator indicates that it is paused. If the second file status indicator indicates that it is paused, end access. If the second file status indicator does not indicate that it is paused, determine if the second file status indicator indicates that it is a change instruction return. If the second file status indicator indicates that it is a change instruction return, end access.

[0029] Repeat the above steps until multiple preset test files have completed the test of the return application function, and obtain the test success rate of the return application function.

[0030] Preferably, the multiple functions to be tested include a file addition function. The preset test file set includes multiple preset test files. Based on the preset test file set, the multiple functions to be tested are tested to obtain the test success rate of each function, including:

[0031] Get the file addition command and the target preset test file. The target preset test file can be any one of the multiple preset test files.

[0032] Determine whether the target preset test file is the type that needs to be added based on the add file command;

[0033] If the target preset test file requires adding a type, then obtain the path and related information of the target preset test file;

[0034] Based on the location and relevant information of the target preset test file, the target preset test file is written, thus completing the addition of the target preset test file;

[0035] Repeat the above steps until multiple preset test files have completed the file addition function test, and obtain the success rate of the file addition function test.

[0036] Preferably, the functions to be tested include the function of specifying a file download path, and multiple preset test file sets include multiple preset test files. Based on the preset test file sets, multiple functions to be tested are tested to obtain the test success rate of each function, including:

[0037] Obtain the download instruction and preset storage space. The preset storage space is used to store the target preset test file. The target preset test file is any one of multiple preset test files. The download instruction includes the storage identifier of the target preset test file in the preset storage space.

[0038] Based on the storage identifier of the download instruction, determine whether the target preset test file exists in the preset storage space;

[0039] If the target preset test file exists, then read the target preset test file and its contents from the preset storage space.

[0040] Determine if the content of the target preset test file is empty; if the content of the target preset test file is empty, end the access.

[0041] If the content of the target preset test file is not empty, download the target preset test file to the specified path;

[0042] Determine whether the target preset test file has been downloaded successfully;

[0043] If the target preset test file is downloaded successfully, a message will be displayed indicating successful download; if the target preset test file fails to download, a message will be displayed indicating failed download.

[0044] Repeat the above steps until multiple preset test files complete the test of the specified file download path function, and obtain the test success rate of the specified file download path function.

[0045] Preferably, the multiple functions to be tested include a file deletion function; the multiple preset test file sets include multiple preset test files. Based on the preset test file sets, the multiple functions to be tested are tested to obtain the test success rate of each function, including:

[0046] Get the deletion command, the user's deletion permission information corresponding to the deletion command, and the target preset test file. The target preset test file can be any one of multiple preset test files.

[0047] Determine whether the target preset test file is indicated to exist. If the target preset test file is indicated to not exist, end the access. If the target preset test file is indicated to exist, obtain the index number of the selected target preset test file based on the target preset test file.

[0048] The system determines whether the target predicted file's index number indicates it is an important file. If the target preset test file's index number indicates it is not an important file, the system executes the file deletion function and records the deletion operation. If the target preset test file's index number indicates it is an important file, the system determines whether the target preset test file's file type indicates it is a source program. If the target preset test file's type does not indicate it is a source program, the access ends. If the target preset test file's type indicates it is a source program, the system checks the user's deletion permission information based on the user information corresponding to the deletion instruction. If the user's deletion permission information indicates they have deletion permission, the system executes the file deletion function to complete the deletion of the target preset test file. If the user's deletion permission information indicates they do not have deletion permission, the access ends.

[0049] Repeat the above steps until multiple test files complete the file deletion function, and obtain the success rate of the file deletion function.

[0050] This application provides an industrial control system security management system applied to computer equipment, including: an acquisition module for acquiring a set of preset test files corresponding to the industrial control system to be tested, wherein the industrial control system to be tested includes multiple functions to be tested.

[0051] The calculation module is used to test multiple functions under test according to a preset set of test files, obtain the test success rate of each function under test, determine the test score of each function under test based on the test success rate of each function under test, and finally calculate the test result of each function under test based on the test score of each function under test and the pre-configured weight coefficient of each function under test.

[0052] The testing module is used to calculate the security test results of the industrial control system under test based on the results of each function under test.

[0053] This application provides a computer device, which includes a processor and a non-volatile memory storing computer instructions. When the computer instructions are executed by the processor, the computer device executes the industrial control system security management method in at least one possible implementation of the first aspect.

[0054] This application provides a readable storage medium, which includes a computer program. When the computer program runs, it controls the readable storage medium to execute the industrial control system security management method in at least one possible implementation of the first aspect on a computer device.

[0055] Compared with the prior art, the present invention has the following beneficial technical effects:

[0056] This application discloses a method for security management of industrial control systems. It involves acquiring a set of preset test files corresponding to the industrial control system under test, then testing multiple functions based on these files to obtain the test success rate for each function. Based on this success rate, a test score is determined for each function. The test result for each function is then calculated using its test score and a pre-configured weighting coefficient. Finally, the security test result of the industrial control system under test is calculated based on the results of each function. Using this method, the stability of the industrial control system can be intuitively understood through the security test results, thus improving both the monitoring efficiency and the operational stability and security of the industrial control system. Attached Figure Description

[0057] Figure 1 This is a flowchart illustrating the steps of a security management method for an industrial control system provided in an embodiment of this application.

[0058] Figure 2 This is a schematic block diagram of the structure of an industrial control system safety management system provided in an embodiment of this application.

[0059] Figure 3 This is a schematic block diagram of the structure of a computer device provided in the embodiments of this application. Detailed Implementation

[0060] The specific embodiments of this application will now be described in detail with reference to the accompanying drawings.

[0061] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0062] like Figure 1 As shown, the present invention provides a security management method for an industrial control system, comprising the following steps:

[0063] Step S201: Obtain the set of preset test files corresponding to the industrial control system to be tested. The industrial control system to be tested includes multiple functions to be tested.

[0064] Step S202: Based on the preset test file set, test multiple functions to be tested and obtain the test success rate of each function to be tested;

[0065] Step S203: Determine the test score for each function under test based on the test success rate of each function under test;

[0066] Step S204: Calculate the test result for each function under test based on the test score of each function under test and the pre-configured weight coefficient of each function under test;

[0067] Step S205: Calculate the security test results of the industrial control system under test based on the results of each function to be tested;

[0068] In this embodiment, the preset test file set is pre-set in the computer device. By using the preset test file set to test multiple functions of the industrial control system, the stability of the current industrial control system can be determined without the need for manual recording and testing of the entire process. This improves the security of the industrial control system's operation and avoids the situation where the industrial control system is severely affected by external network attacks and cannot be detected in time.

[0069] The aforementioned step S202 is implemented through the following steps:

[0070] Sub-step S202-1, using multiple target preset test files to test the data modification function, is implemented in the following way.

[0071] Sub-step S202-1-01: Obtain the data change instruction, the user information corresponding to the data change instruction, and the change permission flag of the target preset test file, wherein the target preset test file is any one of the multiple preset test files.

[0072] Sub-step S202-1-02: Determine whether the change permission flag of the target preset test file indicates that it is allowed to be changed. If the change permission flag indicates that it is allowed to be changed, then determine whether the editing status flag indicates that it is being edited and whether the user information configuration has change data permission. If the editing status flag indicates that it is being edited and the user information configuration has change data permission, then determine whether the change data instruction meets the preset change data instruction. If the change data instruction meets the preset change data instruction, then release the change permission of the target preset test file.

[0073] Sub-step S202-1-03: Based on the modification permissions of the target preset test file, execute the data modification command to complete the data modification of the target preset test file.

[0074] Sub-step S202-1-04: Repeat the above steps until multiple preset test files have completed the test of the data change function, and obtain the test success rate of the data change function.

[0075] In this embodiment, to better understand the solution provided, an example is given to test the data modification function by changing the quantity of a device in a target file. For example, to change the quantity of the device from 6 to 8, the following steps are taken: First, obtain the data modification instruction, the user information corresponding to the data modification instruction, and the modification permission flag of the target file. When the quantity of the device indicates that modification is allowed, the modification permission flag is 0; when the quantity of the device indicates that modification is not allowed, the modification permission flag is not 0. IsEidting refers to the editing status. When editing is in progress, IsEidting is 1. The user information indicates that modification permission is granted, the time taken for changing the device quantity indicates that it is completed within the specified time, and the data after the device quantity change is 8. This completes the test of the data modification function. The data modification function is also tested by changing the type of a product in the target file. For example, changing the product type from "easily corroded" to "extremely corroded." Similarly, the data modification function is tested using multiple target preset test files to obtain the success rate of the data modification function test.

[0076] In this embodiment of the application, the aforementioned step S202 further includes sub-step S202-2.

[0077] Sub-step S202-2: Multiple target preset test files are used to test the sealing application function. This step is implemented through the following steps.

[0078] Sub-step S202-2-01: Obtain the sealing application instruction and the first file status identifier of the target preset test file. The first file status identifier is used to characterize the completion status and archiving status of the target preset test file. The target preset test file is any one of multiple preset test files.

[0079] Sub-step S202-2-02: Determine whether the first file status identifier indicates that archiving has been completed. If the first file status identifier field indicates that archiving has been completed, execute the archive file application instruction to complete the archive of the target prediction file.

[0080] Sub-step S202-2-03: If the status identifier of the first file does not indicate that it has been archived, then determine whether the status identifier of the first file indicates that it is to be checked. If the status identifier of the first file indicates that it is to be checked, then prompt that the target prediction file needs to be checked. If the status identifier of the first file does not indicate that it is to be checked, then update the status identifier of the first file to indicate that it is to be checked.

[0081] Sub-step S202-2-04: Repeat the above steps until multiple preset test files complete the test of the archive file application function, and obtain the test success rate of the archive file application function.

[0082] In this embodiment, to better understand the solution, an example is given. The sealing application function is tested by checking the completion and archiving status of a product type change operation in a target preset test file. For instance, changing a product type from "easily corroded" to "extremely corroded." First, the sealing application instruction and the Tofinish field of the target preset test file are obtained. Tofinish indicates project completion. When a product type is classified as "extremely corroded," Tofinish is 2, indicating the sealing application function test is complete. When a product type is classified as "easily corroded" and indicates "no need to check," Tofinish is not 1, and the Tofinish field of the target preset test file is changed to 1. This process is repeated to test the sealing application function based on the completion and archiving status of other content. Multiple target preset test files are used to test the sealing application function, obtaining the success rate of the sealing application function test.

[0083] In this embodiment of the application, the aforementioned step S202 further includes sub-step S202-3, which uses multiple target preset test files to test the return application function. This step is implemented through the following steps.

[0084] Sub-step S202-3-01: Obtain the file modification instruction, the second file status identifier, and the target preset test file. The second file status identifier is used to represent the modification permissions of the target preset test file. The target preset test file is any one of the multiple preset test files.

[0085] Sub-step S202-3-02: Determine whether the status indicator of the second file indicates that it has been checked and archived. If the status indicator of the second file indicates that it has been checked and archived, execute the return request function and return the file modification instruction.

[0086] Sub-step S202-3-03: If the second file status identifier does not indicate that it has been checked and archived, then determine whether the second file status identifier indicates that it is not started. If the second file status identifier indicates that it is not started, then end the access.

[0087] Sub-step S202-3-04: If the second file status identifier is not in an inactive state, then determine whether the second file status identifier is in a paused state. If the second file status identifier is in a paused state, then end the access.

[0088] Sub-step S202-3-05: If the second file status indicator is not in a paused state, determine whether the second file status indicator indicates a change instruction rollback. If the second file status indicator indicates a change instruction rollback, end the access.

[0089] Sub-step S202-3-06: Repeat the above steps until multiple preset test files complete the return application function test and obtain the test success rate of the return application function.

[0090] In this embodiment, to better understand the solution, an example is given, using the target...

[0091] To test the rollback function, we first modify the file instructions and the target preset test file, including the Tofinish field. Tofinish indicates project completion. When the number of participants for an activity is changed from 23 to 34, Tofinish is set to 1. The target preset test file's Tofinish is then changed to 3 to complete the rollback function test. If the number of participants is 23 and the activity is in an inactive state, Tofinish is set to -1, and the test ends. If the activity is active and paused, Tofinish is set to 2, and the test ends. If the activity is not paused and a rollback modification instruction is received, Tofinish is set to 3, and the test ends. This process is repeated for multiple target preset test files to test the rollback function and determine its success rate.

[0092] In this embodiment of the application, the aforementioned step S202 further includes sub-step S202-4, which uses multiple target preset test files to test the file addition function. This step is implemented in the following manner.

[0093] Sub-step S202-4-01: Obtain the file addition instruction and the target preset test file. The target preset test file can be any one of the multiple preset test files.

[0094] Sub-step S202-4-02: Determine whether the target preset test file is the type that needs to be added based on the file addition instruction. If the target preset test file is the type that needs to be added, obtain the path and related information of the target preset test file.

[0095] Sub-step S202-4-03: Write the target preset test file according to the path and related information of the target preset test file, and complete the addition of the target preset test file.

[0096] Sub-step S202-4-04: Repeat the above steps until multiple preset test files complete the file addition function test, and obtain the success rate of the file addition function test.

[0097] In this embodiment, to better understand the solution, an example is given: the file addition function is tested using a target pre-test management type file. First, the file addition instruction and the target pre-test file are obtained. If the management type file indicates that the file type does not need to be added, the access ends. If the management type file indicates that the file type needs to be added, the path and related information of the management type file are obtained, and the file is added, thus completing the test of the file addition function. This process is repeated, using multiple target pre-test files to test the file addition function and obtain its success rate.

[0098] In this embodiment of the application, the aforementioned step S202 further includes sub-step S202-5, which uses a target preset test file to test the function of the specified file download path. This step is implemented through the following steps.

[0099] Sub-step S202-5-01: Obtain the download instruction and preset storage space. The preset storage space is used to store the target preset test file. The target preset test file is any one of multiple preset test files. The download instruction includes the storage identifier of the target preset test file in the preset storage space.

[0100] Sub-step S202-5-02: Based on the storage identifier of the download instruction, determine whether the target preset test file exists in the preset storage space. If the target preset test file exists, read the target preset test file and its contents from the preset storage space.

[0101] Sub-step S202-5-03: Determine whether the content of the target preset test file is empty. If the content of the target preset test file is empty, end the access. If the content of the target preset test file is not empty, download the target preset test file to the specified path.

[0102] Sub-step S202-5-04: Determine whether the target preset test file has been downloaded successfully. If the target preset test file has been downloaded successfully, prompt "Download successful"; if the target preset test file has failed to download, prompt "Download failed".

[0103] Sub-step S202-5-05: Repeat the above steps until multiple preset test files complete the specified file download path function test, and obtain the test success rate of the specified file download path function.

[0104] In this embodiment, to better understand the solution, an example is given: the function of downloading a specified file is tested by downloading any target preset test file from a certain website to a certain drive. For example, to download a CAD installation package file from a certain website to drive C, the download command, preset storage space, and target preset test file for the preset storage space are first obtained. If the CAD installation package file from the download website is not found, the access ends. If the CAD installation package file from the download website is found, the CAD installation package file and related information are read from the download website. If the related information of the CAD installation package file is empty, the access ends. If the related information of the CAD installation package file is not empty, the CAD installation package file is downloaded to drive C. If the message indicates that the download failed, the access ends. If the message indicates that the download succeeded, the download of the CAD installation package file is completed, and the test of the specified file download path function is completed. This process is repeated, using multiple target preset test files to test the specified file download path function, thus obtaining the success rate of the specified file download path function.

[0105] In this embodiment of the application, the aforementioned step S202 further includes sub-step S202-6, which uses multiple target preset test files to test the file deletion function. This step is implemented through the following steps.

[0106] Sub-step S202-6-01: Obtain the deletion command, the user deletion permission information corresponding to the deletion command, and the target preset test file. The target preset test file can be any one of multiple preset test files.

[0107] Sub-step S202-6-02: Determine whether the target preset test file is indicated to exist. If the target preset test file is indicated to not exist, the access ends. If the target preset test file is indicated to exist, obtain the index number of the selected target preset test file based on the target preset test file.

[0108] Sub-step S202-6-03: Determine whether the index number of the target prediction file indicates that it is an important file. If the index number of the target preset test file does not indicate that it is an important file, then execute the file deletion function and record the deletion of the target preset test file. If the index number of the target preset test file indicates that it is an important file, then determine whether the file type of the target preset test file indicates that it is a source program.

[0109] Sub-step S202-6-04: If the target preset test file type is not a source program, then the access ends; if the target preset test file type is a source program, then based on the user information corresponding to the deletion instruction, determine whether the user's deletion permission information indicates that they have deletion permission.

[0110] Sub-step S202-6-05: If the user's deletion permission information indicates that they have deletion permission, then execute the file deletion function to complete the deletion of the target preset test file; if the user's deletion permission information does not indicate that they have deletion permission, then end the access.

[0111] Sub-step S202-6-06: Repeat the above steps until multiple test files complete the file deletion function, and obtain the success rate of the file deletion function.

[0112] In this embodiment, to better understand the solution, an example is given to test the deletion function using any target preset test file. For instance, to delete a device metal content index file, the process first obtains the deletion instruction, the corresponding user deletion permission information, and the device metal content index file. If the device metal content index file is identified as non-existent, the access ends. If the device metal content index file is identified as existing, its index number is obtained. If the device metal content index file is identified as an unimportant file and the index number is not 0, the device metal content index file is deleted, completing the deletion. If the device metal content index file is identified as an important file and the index number is 0, the file type is determined. If the file type is identified as not being a source program, the access ends. If the file type is identified as a source program and the user has configured deletion permissions, the deletion is completed, thus completing the test of the file deletion function. This process is repeated, using multiple target preset test files to test the file deletion function and obtain its success rate.

[0113] The aforementioned step S203 is implemented through the following steps.

[0114] Sub-step S203-1: Test the data modification function with 100 target preset test files. If all 100 files pass the test, the test success rate of the data modification function is 100%. When the test success rate of the function is 100%, the test function is given a score of 5. The test score of the data modification function is thus determined to be 5 points. The test success rate and test score of the function will be different when the number of files that pass the test is different.

[0115] Sub-step S203-2: Test the sealing application function with 100 target preset test files. If the number of files that pass the test is 96, 97, 98, or 99, the test success rate of the sealing application function is 96%, 97%, 98%, or 99%, respectively. When the test success rate of the function is between 95% and 100%, the function is given a score of 4. The test score of the sealing application function is thus determined to be 4 points. The test success rate and test score of the function will be different when the number of files that pass the test is different.

[0116] Sub-step S203-3: Test the return application function with 100 target preset test files. If the number of files that pass the test is less than 94, the test success rate of the return application function is 94%. When the test success rate of the test function is less than 95%, give the test function 1 point. The test score of the return application function is thus determined to be 1 point. The test success rate and test score of the test function will be different when the number of files that pass the test is different.

[0117] Sub-step S203-4: Test the file addition function with 100 target preset test files. If 75 files pass the test, the success rate of the file addition function is 75%. When the success rate of the test function is lower than 95%, give the test function 1 point. The test score of the file addition function is thus determined to be 1 point. The success rate and test score of the test function will be different when the number of files that pass the test is different.

[0118] Sub-step S203-5: Test the download path function with 100 target preset test files. If 96 files pass the test, the success rate of the download path function is 96%. When the success rate of the test function is between 95% and 100%, the test function is given a score of 4. The success rate and score of the test function will also be different when the number of files that pass the test is different.

[0119] Sub-step S203-6: Test the file deletion function with 100 target preset test files. If 100 files pass the test, the success rate of the file deletion function is 100%. When the success rate of the test function is 100%, the test function is given a score of 5. The test score of the file deletion function is determined to be 5 points. The success rate and test score of the test function will be different when the number of files that pass the test is different.

[0120] The aforementioned step S204 is implemented through the following steps:

[0121] Sub-step S204-1: Given that the test score for the data change function is 5 points, and that the data change function is considered an important test function with a pre-assigned weight of K1, the test result for the data change function is calculated to be 5K1. Here, K1 refers to the greater importance of the data change function compared to other functions. For example, if K1 is 5, then the weight of other functions is less than 5. When the test functions are different, their assigned weights are also different.

[0122] In sub-step S204-2, it is known that the test score for the sealing application function is 4 points, and it is known that the sealing application function is treated as a general test function with a pre-assigned weight of K2. Thus, the test result of the sealing application function is calculated to be 4K. Here, K2 refers to the relative importance of the sealing function compared to other functions. For example, if K2 is 3, then the weight of other functions may be greater than 3 or less than 3. When the test functions are different, their assigned weights are also different.

[0123] Sub-step S204-3: Given that the test score for the return application function is 1 point, and given that the return application function is used as the basic test function and its pre-assigned weight is K3, the test result for the return application function is calculated as K3. Here, K3 means that the return application function is less important than other functions. For example, when K3 is 1, the weight of other functions is greater than 1. When the test functions are different, the weights assigned to them are also different.

[0124] Sub-step S204-4: Given that the test score for the file addition function is 1 point, and given that the file addition function is treated as a general test function with a weight of K2, the test result for the file addition function is calculated as K2. Here, K2 refers to the relative importance of the file addition function compared to other functions. For example, if K2 is 3, the weight of other functions may be greater than 3 or less than 3. When the test functions are different, the weights assigned to them are also different.

[0125] Sub-step S204-5: Given that the test score for the specified file download path function is 4 points, and given that the specified file download path function is used as the basic test function and its assigned weight is K3, the test result for the specified file download path function is calculated to be 4K3. Here, K3 means that the specified file download path function is less important than other functions. For example, when K3 is 1, the weight of other functions is greater than 1. When the test functions are different, the weights assigned to them are also different.

[0126] In sub-step S204-6, the test score for the file deletion function is known to be 5 points. The file deletion function is known to be an important test function and its pre-assigned weight is K1. Therefore, the test result for the data modification function is calculated to be 5K1. Here, K1 refers to the degree of importance of the file deletion function compared to other functions. For example, if K1 is 5, then the weight of other functions is less than 5. When the test functions are different, their assigned weights are also different.

[0127] The aforementioned step S205 is implemented through the following steps:

[0128] Sub-step S205-1: Given that the test results for the data modification function are 5K1, the application sealing function is 4K2, the application return function is K3, the file addition function is K2, the specified file download path function is 4K3, and the file deletion function is 5K1, where K1 is 5, K2 is 3, and K3 is 1, the calculated test result for the industrial control system function is 70. Given that the preset test score threshold for the industrial control system function is 85 points, and that the industrial control system is considered stable when its test score is greater than the preset threshold, the current industrial control system is determined to be unstable. Furthermore, different test results for different functions will result in different calculated test results for the industrial control system function. For example, given that... The test results for the data modification function are 5K1, the test results for the archive application function are 5K2, the test results for the return application function are 5K3, the test results for the add file function are 5K2, the test results for the specify file download path function are 5K3, and the test results for the delete file function are 5K1. If K1 is 5, K2 is 3, and K3 is 1, then the calculated test result for the industrial control system function is 90. It is known that the preset test score threshold for the industrial control system function is 85 points. It is known that when the test score of the industrial control system function is greater than the preset test score threshold, the industrial control system is considered stable. Therefore, the current industrial control system is considered stable. By analogy, when the test scores of the test functions are different, the calculated test results of the industrial control system functions are also different, and the stability of the industrial control system is also different.

[0129] This application provides an industrial control system security management system applied to computer equipment. Please refer to the following documentation. Figure 2 , Figure 2 This application provides a schematic diagram of an industrial control system security management system 110, which includes:

[0130] The acquisition module 1101 is used to acquire a set of preset test files corresponding to the industrial control system under test, which includes multiple functions to be tested.

[0131] The calculation module 1102 is used to test multiple functions under test according to a preset set of test files, obtain the test success rate of each function under test, determine the test score of each function under test based on the test success rate of each function under test, and finally calculate the test result of each function under test based on the test score of each function under test and the pre-configured weight coefficient of each function under test.

[0132] Test module 1103 is used to calculate the security test results of the industrial control system under test based on the results of each function under test.

[0133] It should be noted that the implementation principle of the aforementioned industrial control system safety management system 110 is based on the implementation principle of the aforementioned industrial control system safety management method, and will not be repeated here. It should be understood that the division of the various modules in the above device is merely a logical functional division; in actual implementation, all or part of them are integrated into a single physical entity, or physically separated. Furthermore, all these modules are implemented in software through processing element calls; all also appear in hardware form; some modules are implemented through processing element calls to software, and some are implemented in hardware form. For example, the computing module 1102 is a separately established processing unit, also integrated into a chip in the above device. In addition, it is stored in the memory of the above device as program code, and is called and executed by a processing unit of the above device. The implementation of other modules is similar. Furthermore, these modules can be integrated in whole or in part, or implemented independently. The processing element described here is an integrated circuit with signal processing capabilities. In the implementation process, each step of the above method or each of the above modules is completed through the integrated logic circuit in the hardware of the processor element or through software instructions.

[0134] This application embodiment uses a computing device 100, which includes a processor and a non-volatile memory storing computer instructions. The computer instructions are executed by the processor, and the computer device 100 executes the aforementioned industrial control system security management system 110. For example... Figure 3 As shown, Figure 3This is a structural block diagram of a computer device 130 provided in an embodiment of this application. The computer device 100 includes an industrial control system security management system 110, a memory 111, a processor 112, and a communication unit 113. The computer device 100 is used to execute the aforementioned industrial control system security management method.

[0135] This application describes the implementation of an industrial control system security management method (system) and computer program product according to embodiments of this application using flowcharts and / or block diagrams. It should be understood that each flowchart and / or block diagram, and combinations of flowcharts and / or blocks, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing device, generate instructions for implementing the process... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0136] These computer program instructions are remotely stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to operate in a particular manner, causing the instructions stored in the computer-readable storage medium to produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes containing functions specified in one or more boxes.

[0137] These computer program instructions can also be loaded onto a computer or other programmable data processing equipment, causing the computer or other programmable equipment to perform a series of operational steps to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 A process or multiple processes and / or a block or multiple blocks specifying the steps of a function.

[0138] This invention discloses a security management method for industrial control systems. It involves acquiring a pre-set set of test files corresponding to the industrial control system under test, then testing multiple functions based on the pre-set set of test files to obtain the test success rate of each function. Based on the test success rate of each function, a test score is determined. Finally, based on pre-configured weighting coefficients, the test result of each function is calculated, ultimately yielding the security test result of the industrial control system under test. Using this method, the current stability of the industrial control system can be intuitively understood through the security test results, thereby improving the stability and security of the industrial control system's operation.

[0139] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to include the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0140] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if these modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include these modifications and variations.

Claims

1. A safety management method for an industrial control system, characterized in that, Includes the following steps: S1, Obtain the set of preset test files corresponding to the industrial control system to be tested; S2, according to the preset test file set, test multiple functions of the industrial control system to be tested, and obtain the test success rate of each function to be tested; S3, determine the test score of each of the functions under test based on the test success rate of each of the functions under test; S4. Based on the test score of each of the functions under test and the pre-configured weight coefficient of each of the functions under test, the test result of each of the functions under test is calculated. S5. Based on the results of each of the functions to be tested, calculate the security test results of the industrial control system to be tested, and use them to manage the industrial control system to be tested. The multiple functions to be tested include data modification function, file archive application function, application return function, file addition function, file download path specification function, and file deletion function; the preset test file set includes multiple preset test files, and the multiple functions to be tested are tested according to the preset test file set to obtain the test success rate of each function to be tested; According to the preset test file set, the change data instruction, the user information corresponding to the change data instruction, and the change permission flag of the target preset test file are obtained, wherein the target preset test file is any one of the multiple preset test files; Determine whether the change permission flag of the target preset test file indicates that change is allowed; If the change permission flag indicates that change is allowed, then determine whether the edit status flag indicates that editing is in progress, and whether the user information configuration has the permission to change data; If the editing status indicator indicates that editing is in progress, and the user information is configured with data change permissions, then it is determined whether the data change instruction meets the preset data change instruction. If the data modification instruction satisfies the preset data modification instruction, then the modification permission of the target preset test file is released; Based on the modification permissions of the target preset test file, the data modification instruction is executed to complete the data modification of the target preset test file; Repeat the above steps until the multiple preset test files complete the test of the data change function, and obtain the test success rate of the data change function.

2. The industrial control system security management method according to claim 1, characterized in that, Obtain the sealing application instruction and the first file status identifier of the target preset test file. The first file status identifier is used to characterize the completion status and archiving status of the target preset test file. The target preset test file is any one of the multiple preset test files. Determine whether the status identifier of the first file indicates that archiving has been completed; If the first file status identifier field indicates that archiving has been completed, then the file archive request instruction is executed to complete the archive of the target prediction file; If the first file status identifier does not indicate that archiving has been completed, then determine whether the first file status identifier indicates that it is pending inspection. If the status identifier of the first file indicates that it needs to be checked, then the target prediction file is prompted to be checked. If the first file status identifier does not indicate that it is to be inspected, then the first file status identifier is updated to indicate that it is to be inspected. Repeat the above steps until the multiple preset test files complete the test of the archive file application function, and obtain the test success rate of the archive file application function.

3. The industrial control system security management method according to claim 1, characterized in that, Obtain the file modification instruction, the second file status identifier, and the target preset test file. The second file status identifier is used to characterize the modification permission of the target preset test file, and the target preset test file is any one of the plurality of preset test files. Determine whether the status identifier of the second file indicates that it has been checked and archived; If the second file status indicator indicates that it has been checked and archived, execute the return request function and return the file modification instruction; if the second file status indicator does not indicate that it has been checked and archived, determine whether the second file status indicator indicates that it is in an inactive state. If the status identifier of the second file indicates that it is not started, then the access ends; If the second file status identifier does not indicate an unstarted state, then determine whether the second file status identifier indicates a paused state; If the second file status identifier indicates a paused state, then access ends; If the second file status identifier does not indicate a paused state, then determine whether the second file status identifier indicates a rollback of the change instruction; If the status indicator of the second file indicates that the change instruction has been returned, then the access ends; Repeat the above steps until the multiple preset test files complete the test of the return application function, and obtain the test success rate of the return application function.

4. The industrial control system security management method according to claim 1, characterized in that, Obtain the file addition instruction and the target preset test file, wherein the target preset test file is any one of the plurality of preset test files; Based on the file addition instruction, determine whether the target preset test file is the type that needs to be added; If the target preset test file requires the addition of a type, then obtain the path and related information of the target preset test file; Based on the location and related information of the target preset test file, the target preset test file is written to complete the addition of the target preset test file; Repeat the above steps until the multiple preset test files complete the file addition function test, and obtain the success rate of the file addition function test.

5. The industrial control system security management method according to claim 1, characterized in that, Obtain the download instruction and preset storage space. The preset storage space is used to store the target preset test file. The target preset test file is any one of multiple preset test files. The download instruction includes the storage identifier of the target preset test file in the preset storage space. Based on the storage identifier of the download instruction, determine whether the target preset test file exists in the preset storage space; If the target preset test file exists, then read the target preset test file and its contents from the preset storage space. Determine whether the content of the target preset test file is empty; If the target preset test file contains empty data, the access will end. If the content of the target preset test file is not empty, download the target preset test file to the specified path; Determine whether the target preset test file has been downloaded successfully; If the target preset test file is downloaded successfully, a message will be displayed indicating successful download; if the target preset test file fails to download, a message will be displayed indicating failed download. Repeat the above steps until multiple preset test files complete the test of the specified file download path function, and obtain the test success rate of the specified file download path function.

6. A safety management system for industrial control systems, characterized in that, Applied to computer equipment, including: The acquisition module is used to acquire a set of preset test files corresponding to the industrial control system under test, wherein the industrial control system under test includes multiple functions to be tested; The calculation module is used to test the multiple functions to be tested according to the preset test file set, and obtain the test success rate of each function to be tested; determine the test score of each function to be tested according to the test success rate of each function to be tested; and calculate the test result of each function to be tested according to the test score of each function to be tested and the pre-configured weight coefficient of each function to be tested. The testing module is used to calculate the security test result of the industrial control system under test based on the result of each of the functions to be tested; The multiple functions to be tested include data modification function, file archive application function, application return function, file addition function, file download path specification function, and file deletion function; the preset test file set includes multiple preset test files, and the multiple functions to be tested are tested according to the preset test file set to obtain the test success rate of each function to be tested; According to the preset test file set, the change data instruction, the user information corresponding to the change data instruction, and the change permission flag of the target preset test file are obtained, wherein the target preset test file is any one of the multiple preset test files; Determine whether the change permission flag of the target preset test file indicates that change is allowed; If the change permission flag indicates that change is allowed, then determine whether the edit status flag indicates that editing is in progress, and whether the user information configuration has the permission to change data; If the editing status indicator indicates that editing is in progress, and the user information is configured with data change permissions, then it is determined whether the data change instruction meets the preset data change instruction. If the data modification instruction satisfies the preset data modification instruction, then the modification permission of the target preset test file is released; Based on the modification permissions of the target preset test file, the data modification instruction is executed to complete the data modification of the target preset test file; Repeat the above steps until the multiple preset test files complete the test of the data change function, and obtain the test success rate of the data change function.

7. A computer device, characterized in that, The computer device includes a processor and a non-volatile memory storing computer instructions. When the computer instructions are executed by the processor, the computer device performs the industrial control system security management method according to any one of claims 1-5.

8. A readable storage medium, characterized in that, The readable storage medium includes a computer program, which, when executed, controls the computer device containing the readable storage medium to perform the industrial control system security management method according to any one of claims 1-5.

Images