A scene switching method, device, apparatus and medium

Abstract

The application discloses a scene switching method and device, equipment and medium, and relates to the technical field of industrial control. The method comprises the following steps: creating a plurality of industrial control scenes according to a target industrial control device; and switching a virtual local area network of a secondary switch of a virtual machine and an Internet of Things switch of a programmable logic controller in the industrial control scene to execute the switching of the industrial control scene. Thus, by simultaneously switching the virtual local area network of the secondary switch of the virtual machine and the Internet of Things switch of the programmable logic controller, the synchronous switching and automatic control of the automated virtual scene and the physical scene are realized, and then, by using the scene switching method, the network security research, attack and test are realized on the basis of less expenditure.

Description

Technical Field

[0001] This application relates to the field of industrial control technology, and in particular to a scene switching method, device, equipment and medium. Background Technology

[0002] An industrial control system (ICS) test range is a large-scale information system used for cybersecurity research and testing. By mapping the network environment of a real-world industrial control system onto the test range, a virtual network environment for the ICS system is created. This allows for cybersecurity research, attacks, and testing without affecting the actual production and operation of the real-world ICS system.

[0003] In related technologies, each real-world industrial control system needs to be equipped with a programmable logic controller (PLC). By controlling this PLC, the industrial control system can be controlled.

[0004] However, the above method is only applicable when the industrial control system consists of network devices such as hosts, servers, routers, and switches. For industrial control systems with high equipment value, it would be a waste of a lot of money to bind each PLC to an independent industrial control system. Summary of the Invention

[0005] This application provides a scenario switching method, apparatus, device, and medium that enables network security research, attack, and testing with relatively low costs.

[0006] The embodiments of this application disclose the following technical solutions:

[0007] Firstly, this application provides a scene switching method, including:

[0008] Create multiple industrial control scenarios based on the target industrial control equipment;

[0009] In the industrial control scenario, the switching of the industrial control scenario is performed by simultaneously switching the virtual local area network of the virtual machine's secondary switch and the Internet of Things switch of the programmable logic controller.

[0010] Optionally, in the industrial control scenario, switching the industrial control scenario by simultaneously switching the virtual local area network of the virtual machine's secondary switch and the IoT switch of the programmable logic controller includes:

[0011] In response to the user-selected starting scenario and target scenario, while disconnecting the virtual local area network (VLAN) of the virtual machine's secondary switch and the IoT switch of the programmable logic controller (PLC) in the starting scenario, the virtual local area network (VLAN) of the virtual machine's secondary switch and the IoT switch of the PLC in the target scenario are connected to switch the starting scenario to the target scenario.

[0012] Optionally, the step of creating multiple industrial control scenarios based on the target industrial control equipment includes:

[0013] Create a target based on the target industrial control equipment;

[0014] By configuring the target status of the target, multiple industrial control scenarios can be obtained. The target status includes one or more of the following: target element name, target element type, whether it is virtual, network protocol address, gateway address, subnet mask, and target region.

[0015] Optionally, by configuring the target state of the target, multiple industrial control scenarios can be obtained, including:

[0016] Select a target from the target set;

[0017] By configuring the target status of the target, multiple industrial control scenarios can be obtained.

[0018] Optionally, the method further includes:

[0019] Based on the industrial control scenario, create industrial control tasks;

[0020] The evaluation results are obtained by executing the industrial control task in the industrial control scenario.

[0021] The industrial control scenario is updated based on the evaluation results.

[0022] Secondly, this application provides a scene switching device, including: a creation module and a switching module;

[0023] The creation module is used to create multiple industrial control scenarios based on the target industrial control equipment;

[0024] The switching module is used to perform switching of the industrial control scenario by simultaneously switching the virtual local area network of the virtual machine's secondary switch and the Internet of Things switch of the programmable logic controller.

[0025] Optionally, the switching module is specifically configured to: in response to the user-selected starting scenario and target scenario, while disconnecting the virtual local area network of the secondary switch of the virtual machine in the starting scenario and the IoT switch of the programmable logic controller, connect the virtual local area network of the secondary switch of the virtual machine in the target scenario and the IoT switch of the programmable logic controller, so as to switch the starting scenario to the target scenario.

[0026] Optionally, the creation module includes: a first creation submodule and a second creation submodule;

[0027] The first creation submodule is used to create a target based on the target industrial control equipment;

[0028] The second creation submodule is used to obtain multiple industrial control scenarios by configuring the target status of the target. The target status includes one or more of the following: target element name, target element type, whether it is virtual, network protocol address, gateway address, subnet mask, and target region.

[0029] Optionally, the second creation submodule includes: a selection module and a configuration module;

[0030] The selection module is used to select a target from the targets;

[0031] The configuration module is used to obtain multiple industrial control scenarios by configuring the target state of the target.

[0032] Optionally, the device further includes: a task creation module, a result acquisition module, and a scene update module;

[0033] The task creation module is used to create industrial control tasks based on the industrial control scenario.

[0034] The result acquisition module is used to obtain evaluation results by executing the industrial control task in the industrial control scenario;

[0035] The scenario update module is used to update the industrial control scenario based on the evaluation results.

[0036] Thirdly, this application provides a scene switching device, including: a memory and a processor;

[0037] The memory is used to store programs;

[0038] The processor is used to implement the steps of the above-described scene switching method when executing the computer program.

[0039] Fourthly, this application provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the above-described scene switching method.

[0040] Compared with the prior art, this application has the following beneficial effects:

[0041] This application discloses a scene switching method, apparatus, device, and medium. The method includes: creating multiple industrial control scenarios based on a target industrial control device; and in each industrial control scenario, simultaneously switching the virtual local area network (VLAN) of a virtual machine's secondary switch and the IoT switch of a programmable logic controller (PLC) to perform scene switching. Thus, by simultaneously switching the VLAN of the virtual machine's secondary switch and the IoT switch of the physical PLC, automated synchronous switching and automatic control between virtual and physical scenarios are achieved. Furthermore, this scene switching method enables network security research, attack, and testing with relatively low costs. Attached Figure Description

[0042] To more clearly illustrate the technical solutions in this embodiment or the prior art, the drawings used in the description of the embodiment or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1A A flowchart illustrating a scene switching method provided in an embodiment of this application;

[0044] Figure 1B A schematic diagram illustrating a scene switching method provided in an embodiment of this application;

[0045] Figure 1C This is a flowchart of a task induction method disclosed in an embodiment of this application;

[0046] Figure 2 A schematic diagram of a scene switching device provided in an embodiment of this application;

[0047] Figure 3 A schematic diagram of a computer-readable medium provided for an embodiment of this application;

[0048] Figure 4 This is a schematic diagram of the hardware structure of a server provided in an embodiment of this application. Detailed Implementation

[0049] As mentioned earlier, each real-world industrial control system needs to be equipped with a programmable logic controller (PLC). By controlling this PLC, the industrial control system can be controlled.

[0050] However, the above method is only applicable when the industrial control system consists of network devices such as hosts, servers, routers, and switches. For industrial control systems with high equipment value, it would be a waste of a lot of money to bind each PLC to an independent industrial control system.

[0051] In view of this, this application provides a scene switching method, apparatus, device, and medium. The method includes: creating multiple industrial control scenarios based on the target industrial control equipment; and in each industrial control scenario, switching between the virtual machine's secondary switch (Virtual Local Area Network) and the programmable logic controller's (PLC) IoT switch is performed simultaneously. Thus, by simultaneously switching the virtual machine's secondary switch (Virtual Local Area Network) and the physical PLC's IoT switch, automated synchronous switching and automatic control between virtual and physical scenarios are achieved. Furthermore, this scene switching method enables network security research, attack, and testing with relatively low costs.

[0052] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present application.

[0053] See Figure 1A This figure is a flowchart of a scene switching method provided in an embodiment of this application. The method includes:

[0054] S101: Create a target based on the target industrial control equipment.

[0055] A target is a collection of network devices used by cybersecurity personnel to test all industrial control system scenarios within the simulated organizational structure of an industrial control system in an industrial control range. Therefore, the target needs to correspond to the target industrial control device in the industrial control system.

[0056] In some specific implementations, the target may include one or more network devices such as hosts, servers, routers, and switches. It should be noted that this application does not limit the specific target.

[0057] In this context, a host refers to any computer connected to the industrial control system. Each host has a unique IP address, and all hosts are equal in status.

[0058] A router is a network device that connects multiple networks or network segments, and it "translates" data between different networks or network segments.

[0059] A switch is a network device that identifies data packets based on their MAC addresses (the hardware address of the network interface card) and can encapsulate and forward data packets. Switches can "learn" MAC addresses and store them in an internal address table. By establishing temporary switching paths between the sender and receiver of data frames, they allow data frames to travel directly from the source address to the destination address.

[0060] Understandably, when creating a target, it is also necessary to configure the target status in detail. This target status includes one or more of the following: target element name, target element type, whether it is virtual, Internet Protocol (IP) address, gateway address, subnet mask, and target region. It should be noted that this application does not limit the specific target status.

[0061] Understandably, after creating a target, the target state can be modified by editing the network topology diagram of the target state, thereby modifying the target.

[0062] S102: Create multiple industrial control scenarios based on the target and its status.

[0063] Industrial control scenarios refer to combinations of specific devices and their specific states within a target context, as well as a set of user-defined operations on those devices. In these scenarios, virtual machines are virtual devices operating at the virtual device layer, while PLCs and industrial control equipment are physical devices operating at the physical device layer.

[0064] By acquiring the target created in step S101, configuring the target status corresponding to the target, and configuring the virtual machine and PLC, the virtual machines of each different industrial control scenario can be divided into different network segments to realize the configuration of industrial control scenarios at the virtual level, thereby creating multiple independent industrial control scenarios.

[0065] It should be noted that after creating a target, one can select a target and configure its state to obtain multiple industrial control scenarios. This application does not limit this.

[0066] S103: Configure processes for multiple industrial control scenarios.

[0067] The workflow of an industrial control scenario includes necessary processes such as initialization, startup, and shutdown. The initialization process refers to the process executed after the industrial control scenario is first established; the startup process refers to the process executed when starting a specific industrial control scenario; and the shutdown process refers to the process executed when closing a specific industrial control scenario. For example, when switching from a first target scenario to a second target scenario, the startup process for the second target scenario must be executed after the shutdown process for the first target scenario.

[0068] In some specific implementations, the initialization process can be configured as follows: First, by connecting both the virtual machine and the PLC to the virtual LAN (VLAN) of the secondary switch, the virtual device (virtual machine) and the physical devices (PLC and industrial control equipment) are switched to the same network segment. Second, through the underlying IoT switch, the PLC corresponding to the industrial control equipment is switched at the physical layer. Therefore, after initialization using the above methods, communication between the host computer and the PLC and industrial control equipment can be established.

[0069] In some specific implementations, the configured startup process can be as follows: First, turn on the IoT switch to power on the target PLC cabinet, enabling the PLC to automatically connect to the industrial control system. Then, start the target virtual engineering station (i.e., the host computer unit) and establish communication between the virtual engineering station and the PLC through the configuration software.

[0070] In some specific implementations, the shutdown process can be configured as follows: First, turn off the power to the designated PLC cabinet to disconnect the communication between the PLC and the industrial control system. Then, suspend the virtual engineer station (i.e., the host computer unit) for future use.

[0071] It should be noted that during the process of creating a process, the process can be written and edited using flowcharts. Editing a process refers to editing the commands to be executed, specifying the target elements to be edited, the execution delay, input / output (IO) channels, and other parameters.

[0072] S104: In industrial control scenarios, switching between virtual LANs of virtual machines and IoT switches of programmable logic controllers is performed simultaneously.

[0073] After configuring the industrial control scenario process, you can switch between the industrial control scenario by simultaneously switching the virtual LAN of the virtual machine's secondary switch and the IoT switch of the programmable logic controller.

[0074] In some specific implementations, industrial control scenarios can be switched directly on the local platform in response to user operations. Specifically, in response to the starting and target scenarios selected by the user on the local platform, the virtual LAN of the virtual machine's secondary switch and the IoT switch of the programmable logic controller in the starting scenario are disconnected, while the virtual LAN of the virtual machine's secondary switch and the IoT switch of the programmable logic controller in the target scenario are connected, thereby switching the starting scenario to the target scenario. After switching the starting scenario to the target scenario, the scenario shutdown process in step S103 above, as well as the initialization and startup processes of the target scenario, can be executed automatically.

[0075] In other specific implementations, remote execution via data packet transmission can be used. By receiving remotely transmitted initial and target scenarios, the virtual LAN of the virtual machine's secondary switch and the IoT switch of the programmable logic controller in the initial scenario are disconnected, while the IoT switch of the virtual machine's secondary switch and the IoT switch of the programmable logic controller in the target scenario are connected, thereby switching the initial scenario to the target scenario.

[0076] In other specific implementations, after receiving the target time set by the user on the local platform, as well as the selected starting scenario and target scenario, the system can automatically disconnect the virtual LAN of the secondary switch of the virtual machine in the starting scenario and the IoT switch of the programmable logic controller at the target time, while simultaneously connecting the virtual LAN of the secondary switch of the virtual machine in the target scenario and the IoT switch of the programmable logic controller, so as to switch the starting scenario to the target scenario.

[0077] It should be noted that this application does not limit the specific methods for triggering scene switching.

[0078] In summary, this application discloses a scene switching method, which includes: creating multiple industrial control scenarios based on the target industrial control equipment; and in each industrial control scenario, simultaneously switching the virtual local area network (VLAN) of the virtual machine's secondary switch and the IoT switch of the programmable logic controller (PLC) to perform scene switching. Thus, by simultaneously switching the VLAN of the virtual machine's secondary switch and the IoT switch of the physical PLC, automated synchronous switching and automatic control between virtual and physical scenarios are achieved. This scene switching method enables network security research, attack, and testing with relatively low costs.

[0079] See Figure 1C This figure is a flowchart of a task guidance method disclosed in an embodiment of this application. Task guidance refers to the process of guiding platform users to test a target through platform control. It should be noted that steps S111 to S114 are the same as steps S101 to S104 described above, and will not be repeated here. The task guidance method includes:

[0080] S111: Create a target based on the target industrial control equipment.

[0081] S112: Create multiple industrial control scenarios based on the target and its status.

[0082] S113: Configure processes for multiple industrial control scenarios.

[0083] S114: In industrial control scenarios, switching between virtual LANs of virtual machines and IoT switches of programmable logic controllers is performed simultaneously.

[0084] S115: Create industrial control tasks based on the industrial control scenario.

[0085] Industrial control task information includes one or more of the following: task name, task type, task description, bound sub-target, bound scenario, task execution time, and scoring system name. By specifying the above industrial control task information according to the industrial control scenario, an industrial control task can be created.

[0086] Furthermore, since a complete industrial control scenario includes a series of necessary processes such as initialization, start (or restart), and stop, industrial control tasks also include necessary processes such as industrial control task startup, industrial control task stop, and industrial control task archiving.

[0087] In some examples, an industrial control task might be as follows: As the start time approaches, the task enters a preparation state (i.e., initialization state), and the industrial control platform automatically invokes the initialization process of the industrial control scenario, causing the scenario to automatically roll back to its initial state. Upon reaching the start time, the task automatically starts, monitors any security events that occur in real time, and displays the attack chain in the network topology diagram. The task automatically terminates after its scheduled end time.

[0088] It should be noted that a pause procedure can be added during the execution of industrial control tasks. The industrial control task can be paused by invoking the pause procedure. This pause procedure is user-defined and disconnects the virtual machine from the physical device by controlling the virtual configuration and IoT switch, preventing upper-layer communication packets from reaching the lower-layer physical device, thus achieving the pause effect.

[0089] S116: Obtain evaluation results by executing industrial control tasks in an industrial control scenario.

[0090] After the industrial control task is completed, the system will automatically score the industrial control scenario, task, or operator from multiple dimensions based on the scoring strategy selected during task creation. It should be noted that manual weighting adjustments can be made to the scores based on the scoring strategy.

[0091] S117: Update the industrial control scenario based on the evaluation results.

[0092] After obtaining the evaluation results, the industrial control scenarios and tasks can be updated, and even the operators can be replaced, based on the evaluation results.

[0093] In summary, this application discloses a task-directed method that creates an industrial control scenario and then creates an industrial control task, executes the industrial control task in the industrial control scenario to obtain evaluation results, and updates the industrial control scenario based on the evaluation results. This method can realize network security research, attack, and testing with relatively low expenditure.

[0094] See Figure 2 The figure is a schematic diagram of a scene switching device provided in an embodiment of this application. The scene switching device 200 includes: a creation module 201 and a switching module 202.

[0095] Specifically, the creation module 201 is used to create multiple industrial control scenarios based on the target industrial control equipment; the switching module 202 is used to switch industrial control scenarios by simultaneously switching the virtual local area network of the virtual machine's secondary switch and the IoT switch of the programmable logic controller within the industrial control scenario.

[0096] In some specific implementations, the switching module 202 is specifically used to: respond to the user-selected starting scenario and target scenario, while disconnecting the virtual local area network of the virtual machine's secondary switch and the IoT switch of the programmable logic controller in the starting scenario, connect the virtual local area network of the virtual machine's secondary switch and the IoT switch of the programmable logic controller in the target scenario, so as to switch the starting scenario to the target scenario.

[0097] In some specific implementations, the creation module 201 includes: a first creation submodule and a second creation submodule;

[0098] Specifically, the first creation submodule is used to create targets based on the target industrial control equipment; the second creation submodule is used to obtain multiple industrial control scenarios by configuring the target status of the targets. The target status includes one or more of the following: target element name, target element type, whether it is virtual, network protocol address, gateway address, subnet mask, and target region.

[0099] In some specific implementations, the second sub-module is created, including: a selection module and a configuration module;

[0100] Specifically, the selection module is used to select a target from the targets; the configuration module is used to obtain multiple industrial control scenarios by configuring the target status of the target.

[0101] In some specific implementations, the scene switching device 200 also includes: a task creation module, a result acquisition module, and a scene update module;

[0102] Specifically, the task creation module is used to create industrial control tasks based on the industrial control scenario; the result acquisition module is used to obtain evaluation results by executing industrial control tasks in the industrial control scenario; and the scenario update module is used to update the industrial control scenario based on the evaluation results.

[0103] In summary, this application discloses a scene switching device that simultaneously switches between a virtual virtual machine's secondary switch (Virtual Local Area Network) and a physical programmable logic controller's (PLC) IoT switch, achieving automated synchronous switching and automatic control between virtual and physical scenes. This scene switching method enables network security research, attack, and testing with relatively low costs.

[0104] See Figure 3 This figure is a schematic diagram of a computer-readable medium provided in an embodiment of this application. The computer-readable medium 300 stores a computer program 311, which, when executed by a processor, implements the above-described... Figure 1A The steps of the crack location method.

[0105] It should be noted that, in the context of this application, a machine-readable medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. Machine-readable media can be, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0106] It should be noted that the machine-readable medium described above in this application can be a computer-readable signal medium or a computer-readable storage medium, or any combination of the two. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this application, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium can be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wires, optical fibers, RF (radio frequency), etc., or any suitable combination thereof.

[0107] The aforementioned computer-readable medium may be included in the aforementioned electronic device; or it may exist independently and not assembled into the electronic device.

[0108] See Figure 4 This figure is a schematic diagram of the hardware structure of a server provided in an embodiment of this application. The server 400 can vary considerably due to different configurations or performance, and may include one or more central processing units (CPUs) 422 (e.g., one or more processors) and memory 432, and one or more storage media 430 (e.g., one or more mass storage devices) for storing application programs 440 or data 444. The memory 432 and storage media 430 can be temporary or persistent storage. The program stored in the storage media 430 may include one or more modules (not shown in the figure), each module may include a series of instruction operations on the server. Furthermore, the CPU 422 may be configured to communicate with the storage media 430 and execute the series of instruction operations in the storage media 430 on the server 400.

[0109] Server 400 may also include one or more power supplies 426, one or more wired or wireless network interfaces 450, one or more input / output interfaces 458, and / or one or more operating systems 441, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0110] The steps performed by the positioning method in the above embodiments can be based on this Figure 4 The server structure shown.

[0111] It should also be noted that, according to the embodiments of this application, the above... Figure 1A The process of the crack location method described in the flowchart can be implemented as a computer software program. For example, embodiments of this application include a computer program product comprising a computer program carried on a non-transitory computer-readable medium, the computer program containing instructions for performing the above-described crack location method. Figure 1A The flowchart shows the program code for the method.

[0112] Although the subject matter has been described using language specific to structural features and / or methodological logic, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or actions described above. Rather, the specific features and actions described above are merely illustrative examples of implementing the claims.

[0113] While several specific implementation details are included in the foregoing discussion, these should not be construed as limiting the scope of this application. Certain features described in the context of individual embodiments may also be implemented in combination in a single embodiment. Conversely, various features described in the context of a single embodiment may also be implemented individually or in any suitable sub-combination in multiple embodiments.

[0114] The above description is merely a preferred embodiment of this application and an explanation of the technical principles employed. Those skilled in the art should understand that the scope of disclosure in this application is not limited to technical solutions formed by specific combinations of the above-described technical features, but should also cover other technical solutions formed by arbitrary combinations of the above-described technical features or their equivalents without departing from the above-described concept. For example, technical solutions formed by substituting the above features with (but not limited to) technical features with similar functions disclosed in this application.

Claims

1. A scene switching method, characterized in that, The method includes: Create a target based on the target industrial control equipment; By configuring the target state of the target, multiple industrial control scenarios are obtained; the industrial control scenarios include a starting scenario and a target scenario. In response to the user-selected starting scenario and target scenario, while disconnecting the virtual local area network (VLAN) of the virtual machine's secondary switch and the IoT switch of the programmable logic controller (PLC) in the starting scenario, the virtual local area network (VLAN) of the virtual machine's secondary switch and the IoT switch of the PLC in the target scenario are connected to switch the starting scenario to the target scenario.

2. The method according to claim 1, characterized in that, The target status includes one or more of the following: target element name, target element type, whether it is virtual, network protocol address, gateway address, subnet mask, and target region.

3. The method according to claim 2, characterized in that, By configuring the target state of the target, multiple industrial control scenarios are obtained, including: Select a target from the target set; By configuring the target state of the target, multiple industrial control scenarios can be obtained.

4. The method according to claim 1, characterized in that, The method further includes: Based on the industrial control scenario, create industrial control tasks; The evaluation results are obtained by executing the industrial control task in the industrial control scenario. The industrial control scenario is updated based on the evaluation results.

5. A scene switching device, characterized in that, The device includes: a first creation submodule, a second creation submodule, and a switching module; The first creation submodule is used to create a target based on the target industrial control equipment; The second creation submodule is used to obtain multiple industrial control scenarios by configuring the target state of the target; the industrial control scenario includes a starting scenario and a target scenario; The switching module is configured to, in response to the user-selected starting scenario and target scenario, simultaneously disconnect the virtual local area network (VLAN) of the secondary switch of the virtual machine in the starting scenario and the IoT switch of the programmable logic controller (PLC) in the target scenario, so as to switch the starting scenario to the target scenario.

6. The apparatus according to claim 5, characterized in that, The target status includes one or more of the following: target element name, target element type, whether it is virtual, network protocol address, gateway address, subnet mask, and target region.

7. A scene switching device, characterized in that, include: Memory and processor; The memory is used to store programs; The processor is configured to execute the program to implement the steps of the method as described in claims 1 to 4.

8. A computer storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method as described in claims 1 to 4.

Images