Pooling Methods and Systems for Industrial Control Equipment in Cyber ​​Ranges

Abstract

The present invention belongs to the technical field of industrial control equipment virtualization, and specifically relates to a pooling method and system for industrial control equipment in a network range. The method includes: S1, using a bypass monitoring device to monitor the status of the industrial control equipment in real time; S2, using a bypass control device to establish a physical connection with the industrial control equipment, and initialize and reset the industrial control equipment; S3, according to the data reported by the bypass monitoring device and the bypass control device, establish a virtualized industrial control equipment, and add the virtualized industrial control equipment to the virtualized industrial control equipment pool; S4, when the range needs to call the industrial control equipment, move the call request into the call queue. The present invention has the characteristics of being able to enhance the simulation capability of the industrial control network environment by improving the degree of automation and resource utilization, thereby improving the overall performance and use effect of the network range.

Description

Technical Field

[0001] The present invention belongs to the technical field of industrial control equipment virtualization, and in particular relates to a pooling method and system for industrial control equipment in a network target range. Background Art

[0002] In today's era, with the popularization of the Internet and the acceleration of the digitalization process, security issues in the industrial control field are particularly prominent. As a system of virtual simulation network environment, the network range can provide strong support for network security drills and teaching. At present, most network ranges are B / S (Browser / Server) architectures, and virtual network environments are built through containerization and virtualization technologies. However, in the face of the complex environment in the industrial control field, containerization and virtualization technologies cannot well realize the simulation of industrial control network environments. The existing network ranges require a certain degree of manual intervention to perform operations such as environment initialization and reset to achieve the virtualization capabilities of the industrial control environment. The degree of automation is not high, and the pooling capability is not strong. It is not only inefficient, but also very easy to cause mistakes.

[0003] On the other hand, manual intervention also requires high personnel capabilities, which makes it difficult to organize network security drills and teaching, and it is difficult to meet the requirements of large-scale drills and teaching. Therefore, it is an urgent need in the current research and development of industrial control equipment network ranges to connect the pooled industrial control equipment to the network range through pooling technology to realize automated scheduling, automated environment initialization, reset and other operations, reduce the burden on industrial control environment operation and maintenance personnel, and improve the efficiency of environment startup and allocation. By realizing the pooling of industrial control equipment in the network range, it can not only improve the management efficiency of industrial control equipment in the network range and reduce the burden on operation and maintenance personnel, but also reduce the impact of human factors, improve the consistency of industrial control equipment in different network ranges, ensure the availability of industrial control network ranges, and support large-scale network security drills and teaching. Summary of the invention

[0004] The present invention aims to overcome the problem in the prior art that the current network target range has poor pooling capability for industrial control equipment, and provides a method and system for pooling industrial control equipment in a network target range, which can enhance the simulation capability of the industrial control network environment by improving the degree of automation and resource utilization, thereby improving the overall performance and use effect of the network target range.

[0005] In order to achieve the above-mentioned object of the invention, the present invention adopts the following technical solutions:

[0006] The pooling method of industrial control equipment in a network target range includes the following steps:

[0007] S1, using the bypass monitoring device to monitor the status of the industrial control equipment in real time;

[0008] S2, using the bypass control device to establish a physical connection with the industrial control equipment, and to initialize and reset the industrial control equipment;

[0009] S3, establishing a virtual chemical control device according to the data reported by the bypass monitoring device and the bypass control device, and adding the virtual chemical control device to a virtual chemical control device pool;

[0010] S4, when the shooting range needs to call the industrial control equipment, the call request is moved into the call queue. If there are free virtualized industrial control equipment in the virtualized industrial control equipment pool, the system combines the bypass control device and the bypass monitoring device to complete the initialization of the industrial control equipment and respond to the call request; if there are no free virtualized industrial control equipment, the call request will enter the waiting queue. The system follows the first-in-first-out principle and responds to the call requests one by one when there are free virtualized industrial control equipment.

[0011] Preferably, in step S1, the state of the industrial control device includes a power-on state, a startup state, a running state and an abnormal state of the industrial control device.

[0012] Preferably, step S2 comprises the following steps:

[0013] S21, power on the industrial control equipment. The specific method is as follows:

[0014] After receiving the power-on command, the bypass control device controls the device for controlling the on / off of the circuit connected in series with the power supply of the industrial control device to power on the industrial control device, thereby ensuring that the industrial control device is in an operable state at the physical level;

[0015] S22, performing initialization operations on the industrial control equipment, the specific operations are:

[0016] After the industrial control equipment is powered on, the bypass control device generates an initialization command according to the preset initialization requirements of different industrial control equipment and sends it to the industrial control equipment;

[0017] Or directly send a preset electrical signal to the IO interface of the industrial control equipment;

[0018] S23, monitoring initialization process, the specific operations are:

[0019] The bypass control device monitors the initialization process of the industrial control equipment in real time through the bypass monitoring device, and records and analyzes the response data of the industrial control equipment; if any abnormality or error is found during the initialization process, the bypass control device will promptly correct the status of the industrial control equipment;

[0020] S24, reporting the status of industrial control equipment to the platform, the specific operations are:

[0021] When the industrial control equipment has successfully completed initialization, the bypass control device will report the initialization status of the equipment to the range platform; if the initialization is successful, the industrial control equipment will be registered and added to the virtualized industrial control equipment pool, ready for further scheduling and use.

[0022] Preferably, in step S23, the correction process includes reissuing the initialization command and powering off and restarting.

[0023] Preferably, step S3 comprises the following steps:

[0024] S31, data collection, the specific operations are:

[0025] The bypass monitoring device and bypass control device collect real-time data of industrial control equipment, including operating status, performance indicators and initialization status;

[0026] S32, data processing, the specific operations are:

[0027] Preprocessing the collected data, and classifying and storing key information; the preprocessing includes removing redundant information; the key information includes device model and device operating status;

[0028] S33, virtualization modeling, the specific operations are:

[0029] According to the initialization status of the industrial control equipment reported by the bypass control device, a virtualization model of the industrial control equipment is constructed using virtualization technology; the virtualization model includes the hardware configuration, software environment and network configuration of the industrial control equipment, and is used to truly simulate the operating status of the actual industrial control equipment;

[0030] S34, interface encapsulation, the specific operations are:

[0031] A unified interface is abstracted from the virtualized industrial control equipment, and the interface is uniformly managed and scheduled through a pooling module; the interface includes the start, stop, restart and configuration modification operations of the industrial control equipment;

[0032] S35, join the device pool, the specific operations are:

[0033] Add the virtualized industrial control equipment to the virtualized industrial control equipment pool and update the status information of the virtualized industrial control equipment pool.

[0034] Preferably, step S4 comprises the following steps:

[0035] S41, receiving a call request:

[0036] When the shooting range needs to call industrial control equipment, the system receives and records the call request;

[0037] S42, check the virtual device pool status:

[0038] The system queries the status of the virtualized industrial control equipment pool and determines whether there are any free virtual industrial control equipment that can immediately respond to the call request based on the status of the industrial control equipment reported by the bypass monitoring device;

[0039] S43, initializing virtual industrial control equipment:

[0040] If there are free virtual industrial control devices in the virtual industrial control device pool, the system initializes the free virtual industrial control devices through the bypass control device and the bypass monitoring device; the initialization process includes loading device configuration, starting related services and checking the device operation status to ensure that the virtual industrial control devices are ready;

[0041] S44, allocate virtual industrial control equipment:

[0042] After initialization is completed, the system allocates the available virtual industrial control devices to the call request and returns the detailed information of the virtual industrial control devices to the range user; the user accesses and controls the allocated virtual industrial control devices through a unified interface;

[0043] S45, enter the waiting queue:

[0044] If there are no free virtual industrial control devices in the virtual industrial control device pool, the system will move the call request into the waiting queue and manage it according to the principle of responding to the request that enters the waiting queue first. The system continuously monitors the status of the virtual industrial control device pool and will immediately respond to the call request in the waiting queue once a free virtual industrial control device is released.

[0045] S46, Priority Management:

[0046] The call request contains priority information. The system manages the priority of the requests in the waiting queue according to the importance and urgency of the call request. The requests in the waiting queue are sorted from high to low according to the priority. High-priority requests are responded to first when there are free virtual industrial control devices to ensure that key tasks can be processed in time.

[0047] S47, respond to the call request:

[0048] When there are free virtual industrial control devices, the system responds to the call requests one by one in the order of the waiting queue; during each response, the system rechecks the status of the virtual industrial control device pool.

[0049] Preferably, in step S41, the call request includes device type information, function requirement information and runtime information.

[0050] Preferably, in step S42, the industrial control device status includes not powered on, being powered on, not initialized, being initialized, and initialization completed.

[0051] The present invention also provides a pooling system for industrial control equipment in a network range, including:

[0052] The range platform is responsible for completing the construction of the attack and defense range, including the pooling module and the virtualization module;

[0053] The pooling module is responsible for completing the pooling and scheduling of virtual industrial control equipment provided by the virtualization module;

[0054] The virtualization module is used to generate a virtualization model and initialize and configure the industrial control equipment by receiving the operating status data of the industrial control equipment;

[0055] The pooling device is responsible for interacting with the industrial control equipment at the physical level to achieve bypass monitoring and control, including a bypass monitoring device and a bypass control device;

[0056] The bypass monitoring device is responsible for monitoring the operating status of the industrial control equipment, including real-time monitoring of the power-on status, startup status, operating status and abnormal status of the industrial control equipment, and timely discovering and reporting any abnormal situation by collecting and analyzing the real-time data of the industrial control equipment;

[0057] The bypass control device is responsible for controlling the industrial control equipment, including powering on, initializing and monitoring the initialization process of the industrial control equipment;

[0058] Industrial control equipment is monitored and controlled through pooling devices; real-time data and status information of industrial control equipment are collected and processed to build and manage virtualized industrial control equipment pools.

[0059] Compared with the prior art, the present invention has the following beneficial effects: (1) The present invention realizes the automatic monitoring, initialization and reset operations of industrial control equipment through bypass monitoring and control devices, reduces manual intervention, improves operation efficiency and resource utilization, and reduces operation and maintenance costs; (2) The centralized management and scheduling capabilities of the virtualization and pooling modules proposed in the present invention maximize the use of equipment resources, shorten the equipment initialization time, and ensure efficient resource allocation; (3) The present invention enhances the simulation capability of the industrial control network environment, supports large-scale network security drills and teaching, and improves the overall performance and use effect of the network target range; through priority management and scheduling algorithms, the system can dynamically adjust the call queue to ensure that key Tasks are processed in a timely manner, reducing waiting time and improving response speed and efficiency; automated monitoring and scheduling reduce human operation errors and improve the accuracy and stability of management and simulation; the unified interface module enables users to easily access and control virtualized chemical control equipment, supports various operations, and improves user experience and operational convenience; when a device fails or malfunctions, the system can quickly monitor and take measures to reset or reinitialize it, ensuring that the device quickly returns to normal operating status and ensuring the continuous and stable operation of the network target range; (4) The present invention has significant advantages in improving management efficiency, optimizing resource utilization, and enhancing simulation capabilities, providing strong technical support for network security drills and teaching. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] Figure 1 A flow chart of the pooling method of industrial control equipment in a network target range in the present invention;

[0061] Figure 2 A schematic diagram of the architecture of a pooling system of industrial control equipment in a network target range in the present invention. DETAILED DESCRIPTION

[0062] In order to more clearly illustrate the embodiments of the present invention, the specific implementation methods of the present invention will be described below with reference to the accompanying drawings. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those of ordinary skill in the art, other accompanying drawings and other implementation methods can be obtained based on these accompanying drawings without creative work.

[0063] like Figure 1 As shown, the present invention provides a pooling method for industrial control equipment in a network target range, comprising the following steps:

[0064] 1. Use bypass monitoring devices to monitor the operating status of industrial control equipment:

[0065] The bypass monitoring device monitors the power-on status, startup status, operation status and abnormal status of industrial control equipment in real time. By collecting and analyzing the real-time data of industrial control equipment, the bypass monitoring device can promptly detect and report any abnormal conditions of the equipment, providing reliable data support for subsequent equipment initialization and reset operations.

[0066] 2. Use the bypass control device to establish a physical connection with the industrial control equipment, which specifically includes the following steps:

[0067] 2-1. Power-on operation: After receiving the power-on command, the bypass control device controls the relay, optocoupler and other devices connected in series with the power supply of the industrial control equipment to power on the industrial control equipment to ensure that the equipment is in an operational state at the physical level.

[0068] 2-2. Initialization operation: After the industrial control equipment is powered on, the bypass control device generates an initialization command and sends it to the industrial control equipment or sends a specific electrical signal to the IO interface of the industrial control equipment according to the preset initialization requirements of different industrial control equipment. The initialization command includes equipment configuration, parameter settings, etc. to ensure that the equipment works according to the predetermined requirements.

[0069] 2-3. Monitor the initialization process: The bypass control device monitors the initialization process of the industrial control equipment in real time through the bypass monitoring device, and records and analyzes the response data of the equipment. If an abnormality or error is found during the initialization process, the bypass control device will take measures such as reissuing the initialization command, powering off and restarting, etc. to correct the equipment status.

[0070] 2-4. Report the status of industrial control equipment to the platform: When the industrial control equipment successfully completes the initialization, the bypass control device reports the initialization status of the equipment to the range platform. If the initialization is successful, the equipment will be registered and added to the virtualized industrial control equipment pool, ready for further scheduling and use.

[0071] 3. According to the data reported by the bypass monitoring device and the bypass control device, a virtualized chemical control device is established and added to the virtualized chemical control device pool, which specifically includes the following steps:

[0072] 3-1. Data collection: The bypass monitoring device and bypass control device collect real-time data of industrial control equipment, including operating status, performance indicators and initialization status. These data will serve as the basic information of virtualized industrial control equipment.

[0073] 3-2. Data processing: pre-process the collected data, remove redundant information, and classify and store key information, including equipment model and equipment operating status. The pre-processed data will be used to build virtualized chemical control equipment.

[0074] 3-3. Virtualization modeling: Based on the device initialization status reported by the bypass control device, use virtualization technology to model the industrial control equipment. The virtualization model includes the hardware configuration, software environment, network configuration, etc. of the equipment to ensure that the virtualized device can truly simulate the operating status of the actual industrial control equipment.

[0075] 3-4. Interface encapsulation: Abstract the virtualized industrial control equipment into a unified interface to facilitate unified management and scheduling by the pooling module. These interfaces include operations such as starting, stopping, restarting, and modifying configuration of the equipment.

[0076] 3-5. Add to device pool: Add the virtualized industrial control equipment to the virtualized industrial control equipment pool and update the status information of the equipment pool. The virtualized industrial control equipment in the equipment pool can be dynamically scheduled and allocated according to the needs of the range.

[0077] 4. When the shooting range needs to call the industrial control equipment, the call request is moved into the call queue, which specifically includes the following steps:

[0078] 4-1. Receive call request: When the range needs to call industrial control equipment, the system receives and records the call request. The call request includes detailed information such as device type, functional requirements, and operating time.

[0079] 4-2. Check the status of the virtual device pool: The system queries the status of the virtual industrial control device pool to determine whether there are free virtual industrial control devices that can immediately respond to the call request. The status of industrial control devices includes not powered on, powered on, not initialized, initializing, and initialized.

[0080] 4-3. Initialize virtual industrial control equipment: If there are free virtual industrial control equipment in the virtual industrial control equipment pool, the system will initialize the virtual industrial control equipment through the bypass control device and the bypass monitoring device. The initialization process includes loading device configuration, starting related services, checking the device operation status, etc., to ensure that the virtual industrial control equipment is ready.

[0081] 4-4. Allocate virtual industrial control devices: After initialization is completed, the system allocates the available virtual industrial control devices to the call request and returns the detailed information of the device to the range user. The user can access and control the allocated virtual industrial control devices through the unified interface.

[0082] 4-5. Enter the waiting queue: If there are no free devices in the virtualized chemical control device pool, the system will move the call request into the waiting queue and manage it according to the principle of first-in-first-out (the request that enters the waiting queue first will be responded to first). The system continuously monitors the status of the device pool and will immediately respond to the call request in the waiting queue once a free device is released.

[0083] 4-6. Priority management: The system can manage the priority of the requests in the waiting queue according to the importance and urgency of the call request. High-priority requests can be responded to first when there are spare devices, ensuring that critical tasks can be processed in a timely manner.

[0084] 4-7. Respond to call requests: When there are free virtual industrial control devices, the system responds to the call requests one by one in the order of the waiting queue. During each response, the system will recheck the device pool status to ensure efficient use of device resources.

[0085] In addition, if Figure 2 As shown, the present invention also provides a pooling system of industrial control equipment in a network range, including:

[0086] The shooting range platform is responsible for completing the construction of the attack and defense shooting range; the shooting range platform includes a pooling module and a virtualization module.

[0087] Pooling module: responsible for completing the pooling and scheduling of virtual industrial control equipment provided by the virtualization module. This module includes functions such as unified management, scheduling, allocation, and status monitoring of equipment to ensure efficient utilization and dynamic scheduling of virtual industrial control equipment.

[0088] Virtualization module: responsible for communicating with the bypass control and monitoring module to realize the virtualization of industrial control equipment. This module generates a virtualization model and initializes and configures the equipment by receiving the operating status data of the industrial control equipment.

[0089] Pooling device: responsible for interacting with industrial control equipment at the physical level to achieve bypass monitoring and control. The pooling device includes bypass monitoring devices and bypass control devices.

[0090] Bypass monitoring device: responsible for monitoring the operating status of industrial control equipment, including real-time monitoring of the power-on status, startup status, operating status and abnormal status of industrial control equipment. By collecting and analyzing the real-time data of the equipment, any abnormal situation can be discovered and reported in time.

[0091] Bypass control device: responsible for controlling industrial control equipment, including power-on, initialization and monitoring of the initialization process of industrial control equipment. By controlling relays, optocouplers and other devices, the industrial control equipment is precisely controlled to ensure the operability of the equipment at the physical level.

[0092] Industrial control equipment: The actual industrial control equipment is monitored and controlled through the pooling device. The real-time data and status information of the equipment will be collected and processed to build and manage the virtualized industrial control equipment pool.

[0093] Based on the technical solution of the present invention, the following case scenario is used to illustrate the implementation process of the present invention in practical application. The specific application implementation plan is as follows:

[0094] This scenario is to pool industrial control equipment based on single-chip microcomputers, which mainly includes the following steps:

[0095] 1. Pooling device startup: The bypass monitoring device and bypass control device are physically connected to the industrial control equipment and connected to the network.

[0096] 2. Power on industrial control equipment: The bypass control device obtains the device status reported by the bypass monitoring device. If the industrial control equipment is not powered on, the bypass control device will power on the industrial control equipment through devices such as control relays and optocouplers that are connected in series with the power supply of the industrial control equipment. After powering on, the bypass control device will wait for the bypass monitoring device to report that the status of the industrial control equipment has changed to "powered on, not initialized". After changing to this state, the bypass control device will start the next operation.

[0097] 3. Industrial control equipment initialization: After confirming that the industrial control equipment is powered on, the bypass control device will transmit the type and model information of the industrial control equipment to the range platform, and obtain the corresponding industrial control equipment initialization command from the range platform based on the above information, such as: sending a string to a specified serial port, setting a specified IO interface to a high level, or sending a data packet to a specified IP address. After that, the bypass control device will execute the initialization command, and determine whether the initialization status of the industrial control equipment is abnormal through the bypass monitoring device. The status of the industrial control equipment will turn to "initializing" and "initialization completed" in turn. If an unexpected status is found during the initialization process, the bypass control device will take measures such as reissuing the initialization command, powering off and restarting to correct the device status, and restart the initialization operation.

[0098] 4. Industrial control equipment virtualization registration: After confirming that the industrial control equipment initialization is complete, the bypass control device will send the type, model, status and other information of the industrial control equipment to the range platform. After receiving the information reported by the bypass control device, the range platform will automatically create a virtualized object of the industrial control equipment and attach the reported information to the virtualized object. After completing the creation of the virtualized object, the range platform will add the object to the virtualized industrial control equipment pool.

[0099] 5. The target range platform responds to the user's request to create a target machine: The user sends a request to create a target machine to the target range platform. The target range platform puts the request into the waiting queue and sorts the queue according to the request priority. High-priority requests are responded to first to ensure that critical tasks can be processed in a timely manner. When there is a matching idle virtualized industrial control device in the industrial control equipment resource pool, the target range platform takes out the head request from the waiting queue for processing and response. At this time, the status of the virtualized industrial control device will be changed to "occupied" to avoid occupying industrial control equipment at the same time. If an exception occurs during processing, the target range platform will terminate the current processing flow and reinsert the current request into the waiting queue with the highest priority to ensure that the current request can be processed again in the shortest time.

[0100] 6. User occupies the target machine: After the target machine is prepared by the range platform, the user will obtain the usage information of the target machine, such as network address, interaction mode, available time, etc. After the user has finished using it, he can send a request to release the target machine to the range platform.

[0101] 7. The range platform releases the target machine: When the target machine usage time has timed out or a request to release the target machine is received from the user, the range platform will start the target machine release process. The platform will first send an instruction to initialize the industrial control device to the bypass control device to ensure that the status of the device is consistent each time the industrial control device is called. After the industrial control device is initialized, the range platform will change the status of the virtual device of the industrial control device in the platform virtualization pool to "initialization completed" for the next request.

[0102] The present invention realizes the automatic monitoring, initialization and reset operation of industrial control equipment through bypass monitoring and control devices, reduces manual intervention, improves operation efficiency and resource utilization, and reduces operation and maintenance costs; the centralized management and scheduling capabilities of the virtualization and pooling modules proposed in the present invention maximize the use of equipment resources, shorten the equipment initialization time, and ensure efficient resource allocation; the present invention enhances the simulation capability of the industrial control network environment, supports large-scale network security drills and teaching, and improves the overall performance and use effect of the network range; through priority management and scheduling algorithms, the system can dynamically adjust the call queue to ensure that key tasks are processed in a timely manner, reduce waiting time, and improve response speed and efficiency; automated monitoring and scheduling reduce human operation errors, and improve the accuracy and stability of management and simulation; a unified interface module enables users to easily access and control virtualized industrial control equipment, supports various operations, and improves user experience and operation convenience; when a device fails or is abnormal, the system can quickly monitor and take measures to reset or reinitialize, ensuring that the device quickly recovers to a normal operating state and ensuring the continuous and stable operation of the network range; the present invention has significant advantages in improving management efficiency, optimizing resource utilization, and enhancing simulation capabilities, and provides strong technical support for network security drills and teaching.

[0103] The above description is only a detailed description of the preferred embodiments and principles of the present invention. For ordinary technicians in this field, according to the ideas provided by the present invention, there will be changes in the specific implementation methods, and these changes should also be regarded as the protection scope of the present invention.

Claims

1. A pooling method for industrial control equipment in a network range, characterized in that: The steps include: S1, using the bypass monitoring device to monitor the status of the industrial control equipment in real time; S2, using the bypass control device to establish a physical connection with the industrial control equipment, and initialize the industrial control equipment and initialize the monitoring of the industrial control equipment; S3, establishing a virtual chemical control device according to the data reported by the bypass monitoring device and the bypass control device, and adding the virtual chemical control device to a virtual chemical control device pool; S4, when the shooting range needs to call the industrial control equipment, the call request is moved into the call queue. If there is an idle virtualized industrial control equipment in the virtualized industrial control equipment pool, the system combines the bypass control device and the bypass monitoring device to complete the initialization of the industrial control equipment and respond to the call request; if there is no idle virtualized industrial control equipment, the call request will enter the waiting queue, and the system will respond to the call requests one by one in accordance with the first-in-first-out principle when there is an idle virtualized industrial control equipment; Step S2 includes the following steps: S21, power on the industrial control equipment. The specific method is as follows: After receiving the power-on command, the bypass control device controls the device for controlling the on / off of the circuit connected in series with the power supply of the industrial control device to power on the industrial control device, thereby ensuring that the industrial control device is in an operable state at the physical level; S22, performing initialization operations on the industrial control equipment, the specific operations are: After the industrial control equipment is powered on, the bypass control device generates an initialization command according to the preset initialization requirements of different industrial control equipment and sends it to the industrial control equipment; Or directly send a preset electrical signal to the IO interface of the industrial control equipment; S23, monitoring initialization process, the specific operations are: The bypass control device monitors the initialization process of the industrial control equipment in real time through the bypass monitoring device, and records and analyzes the response data of the industrial control equipment; If any abnormality is found during the initialization process, the bypass control device will promptly correct the status of the industrial control equipment; S24, reporting the status of industrial control equipment to the platform, the specific operations are: When the industrial control equipment has successfully completed initialization, the bypass control device reports the initialization status of the equipment to the range platform; if the initialization is successful, the industrial control equipment will be registered and added to the virtualized industrial control equipment pool, ready for further scheduling and use; In step S3, the data reported by the bypass monitoring device and the bypass control device specifically refers to the real-time data of the industrial control equipment collected by the bypass monitoring device and the bypass control device, including the operating status, performance indicators and initialization status.

2. The pooling method of industrial control equipment in a network range according to claim 1 is characterized in that: In step S1, the state of the industrial control device includes a power-on state, a startup state, a running state, and an abnormal state of the industrial control device.

3. The pooling method of industrial control equipment in a network range according to claim 1 is characterized in that: In step S23, the correction process includes reissuing the initialization command and powering off and restarting.

4. The pooling method of industrial control equipment in a network range according to claim 1 is characterized in that: Step S3 also includes the following steps: S31, data processing, the specific operations are: Preprocessing the collected data, and classifying and storing key information; the preprocessing includes removing redundant information; the key information includes device model and device operating status; S32, virtualization modeling, the specific operations are: According to the initialization status of the industrial control equipment reported by the bypass control device, a virtualization model of the industrial control equipment is constructed using virtualization technology; the virtualization model includes the hardware configuration, software environment and network configuration of the industrial control equipment, and is used to truly simulate the operating status of the actual industrial control equipment; S33, interface encapsulation, the specific operations are: A unified interface is abstracted from the virtualized industrial control equipment, and the interface is uniformly managed and scheduled through a pooling module; the interface includes the start, stop, restart and configuration modification operations of the industrial control equipment; S34, join the device pool, the specific operations are: Add the virtualized industrial control equipment to the virtualized industrial control equipment pool and update the status information of the virtualized industrial control equipment pool.

5. The pooling method of industrial control equipment in a network range according to claim 1 is characterized in that: Step S4 includes the following steps: S41, receiving a call request: When the shooting range needs to call industrial control equipment, the system receives and records the call request; S42, check the virtual device pool status: The system queries the status of the virtualized industrial control equipment pool and determines whether there are any free virtual industrial control equipment that can immediately respond to the call request based on the status of the industrial control equipment reported by the bypass monitoring device; S43, initializing virtual industrial control equipment: If there are free virtual industrial control devices in the virtual industrial control device pool, the system initializes the free virtual industrial control devices through the bypass control device and the bypass monitoring device; the initialization process includes loading device configuration, starting related services and checking the device operation status to ensure that the virtual industrial control devices are ready; S44, allocate virtual industrial control equipment: After initialization is completed, the system allocates the available virtual industrial control devices to the call request and returns the detailed information of the virtual industrial control devices to the range user; the user accesses and controls the allocated virtual industrial control devices through a unified interface; S45, enter the waiting queue: If there are no free virtual industrial control devices in the virtual industrial control device pool, the system will move the call request into the waiting queue and manage it according to the principle of responding to the request that enters the waiting queue first. The system continuously monitors the status of the virtual industrial control device pool and will immediately respond to the call request in the waiting queue once a free virtual industrial control device is released. S46, Priority Management: The call request contains priority information. The system manages the priority of the requests in the waiting queue according to the importance and urgency of the call request. The requests in the waiting queue are sorted from high to low according to the priority. High-priority requests are responded to first when there are free virtual industrial control devices to ensure that key tasks can be processed in time. S47, respond to the call request: When there are free virtual industrial control devices, the system responds to the call requests one by one in the order of the waiting queue; during each response, the system rechecks the status of the virtual industrial control device pool.

6. The pooling method of industrial control equipment in a network range according to claim 5 is characterized in that: In step S41, the call request includes device type information, function requirement information and runtime information.

7. The pooling method of industrial control equipment in a network range according to claim 5, characterized in that: In step S42, the industrial control device status includes not powered on, being powered on, not initialized, being initialized, and initialization completed.

8. A pooling system for industrial control equipment in a network range, used to implement the pooling method for industrial control equipment in a network range as described in any one of claims 1 to 7, characterized in that: The pooling system of the industrial control equipment in the network range includes: The range platform is responsible for completing the construction of the attack and defense range, including the pooling module and the virtualization module; The pooling module is responsible for completing the pooling and scheduling of virtual industrial control equipment provided by the virtualization module; The virtualization module is used to generate a virtualization model and initialize and configure the industrial control equipment by receiving the operating status data of the industrial control equipment; The pooling device is responsible for interacting with the industrial control equipment at the physical level to achieve bypass monitoring and control, including a bypass monitoring device and a bypass control device; The bypass monitoring device is used to monitor the status of the industrial control equipment; The bypass control device is responsible for controlling the industrial control equipment, including powering on, initializing and monitoring the initialization process of the industrial control equipment; Industrial control equipment is monitored and controlled through pooling devices; real-time data and status information of industrial control equipment are collected and processed to build and manage virtualized industrial control equipment pools.

Images