Method, system and terminal for spanning tree protocol anomaly detection for industrial control network

Abstract

The application relates to the technical field of computer networks, and discloses a spanning tree protocol anomaly detection method, system and terminal for an industrial control network, which collects device information under the scene of dividing and managing VLANs by using a specific protocol and does not interfere with production flow in the design network topology environment; the network device control plane static configuration is combined with real-time flow for analysis, the anomaly detection has high real-time performance; the data state is monitored in an out-of-band mode, is not dependent on production flow, and when an actual fault occurs, the device can still be accessed or the device operation condition can be judged through an out-of-band port, and the robustness is very strong; an efficient simulation model and a judgment mechanism are used to locate the anomaly, and the expected behavior and the real-time behavior of the device in the network are provided, the influence caused by the difference can be explained to a certain extent when the two behaviors are different, the administrator can conveniently troubleshoot and correct errors, and the application has high ease of use.

Images