Security defense method and system for trusted industrial control system

Abstract

The invention discloses a security defense method and system for a trusted industrial control system, and belongs to the technical field of industrial control systems.The method comprises the steps that based on the minimum permission principle, an access permission set is configured for a user according to the role of the user, and identity authentication information used for logging in the trusted industrial control system is generated; limiting the authentication process of the user by adopting a locking mechanism; a granularity control method is adopted to control the user access authority; a secret key encryption mechanism is adopted in the data transmission process of the trusted industrial control system; the configuration log management method in the trusted industrial control system is used for recording a user operation process and operation data of the trusted industrial control system in real time. And distributing the load of the server by adopting a load balancing technology. According to the method, comprehensive protection of the trusted industrial control system is realized by comprehensively applying various security defense strategies and technical means, and the security, reliability, flexibility and manageability of the trusted industrial control system are remarkably improved.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial control systems, and in particular to a security defense method and system for a trusted industrial control system. Background Art

[0002] The DCS (Distributed Control System) system of a thermal power plant belongs to the industrial control system, which has very strict requirements for information security. Therefore, for a trusted management platform, the security of the industrial control system is the first priority. The security of the DCS system of a thermal power plant depends on the security of the physical environment in which the industrial control system operates, the security of the server and network, the security of the operating system, the security of the application system, and the security of the application data.

[0003] The existing industrial control system lacks the necessary physical protection measures, such as security environment control mechanism, authorization settings and security change testing mechanism, which increases the risk of illegal access or damage to the industrial control system. In addition, the industrial control system network is not divided into virtual LANs, the architecture design is unreasonable, and it cannot effectively prevent broadcast storms and other problems, which increases the risk of network attacks. Summary of the invention

[0004] In view of the problems existing in the prior art, the present invention provides a security defense method and system for a trusted industrial control system, which provides safe and stable services for a DCS system of a thermal power plant.

[0005] The present invention is achieved through the following technical solutions: In a first aspect, the present application provides a security defense method for a trusted industrial control system, which is characterized by comprising: Based on the principle of least privilege, configure access permission sets for users according to their roles; Generate identity authentication information for logging into a trusted industrial control system, and use a locking mechanism to restrict the user's authentication process; Use granular control methods to control the access data of each user's access rights. Set coarse-grained control and fine-grained control for each user's access rights. Coarse-grained control is used to control the functions of the trusted industrial control system corresponding to the access rights, and fine-grained control is used to control the underlying operating data of the trusted industrial control system corresponding to the access rights. The data transmission process of the trusted industrial control system adopts a key encryption mechanism; The trusted industrial control system is configured with a log management method for real-time recording of user operation processes and operation data of the trusted industrial control system; Load balancing technology is used to distribute the server load of the trusted industrial control system.

[0006] Preferably, the identity authentication information includes user name, password, biometric information and / or dynamic token.

[0007] Preferably, the use of a locking mechanism to restrict the user's authentication process includes: Set a threshold for the number of authentication failures in the trusted industrial control system. When a user's consecutive authentication failures reach the threshold, the user's account will be automatically locked.

[0008] Preferably, an encrypted channel is established between the server and the client of the trusted industrial control system, and the transmitted data is transmitted after being encrypted. The client and the server respectively hold corresponding private keys and public keys for encrypting and decrypting data.

[0009] Preferably, the key encryption mechanism uses TLS / SSL security protocol to encrypt and transmit data.

[0010] Preferably, the server and database of the trusted industrial control system adopt an active-standby configuration.

[0011] Preferably, the configuration log management method in the trusted industrial control system includes: Generate logs based on the operation data of the trusted industrial control system; Categorize logs according to their importance and type; Audit classified logs to obtain and handle security issues of trusted industrial control systems; Log protection: Encrypted storage and regular backup of logs to prevent logs from being tampered with or lost, and limit access rights to logs.

[0012] In a second aspect, the present application provides a security defense system for a trusted industrial control system, including: Permission module, which is used to configure access permission sets for users based on their roles based on the principle of least privilege; The authentication module is used to generate identity authentication information for logging into the trusted industrial control system and use a locking mechanism to restrict the user's authentication process; The access module is used to control the access data of each user's access rights by adopting a granular control method. Coarse-grained control and fine-grained control are set for each user's access rights. The coarse-grained control is used to control the functions of the trusted industrial control system corresponding to the access rights, and the fine-grained control is used to control the underlying operating data of the trusted industrial control system corresponding to the access rights. An encryption module, used for the data transmission process of the trusted industrial control system using a key encryption mechanism; A log module, used to configure a log management method in the trusted industrial control system, and to record the user operation process and the operation data of the trusted industrial control system in real time; The load distribution module is used to distribute the server load of the trusted industrial control system using load balancing technology.

[0013] In a third aspect, the present application provides an electronic device, including: Memory for storing computer programs; A processor is used to implement the steps of the security defense method for a trusted industrial control system when executing the computer program.

[0014] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and wherein the computer program, when executed by a processor, implements the steps of the security defense method for a trusted industrial control system.

[0015] Compared with the prior art, the present invention has the following beneficial technical effects: The present invention provides a security defense method for a trusted industrial control system, which allocates access rights to users based on the principle of least privilege, and through a granular control method (coarse-grained control is used to control the functions of the trusted industrial control system, and fine-grained control is used to control the underlying operating data of the trusted industrial control system), the risk of unauthorized access and misoperation is greatly limited, and the security of the trusted industrial control system is effectively improved. At the same time, combined with identity authentication information and a locking mechanism, malicious login attempts such as brute force cracking are effectively prevented, further enhancing the protection capabilities of the trusted industrial control system. In addition, the TLS / SSL security protocol is used to encrypt and transmit data to ensure the confidentiality and integrity of the data during transmission, and to prevent the data from being intercepted or tampered with during transmission. The method achieves comprehensive protection of trusted industrial control systems by comprehensively using a variety of security defense strategies and technical means, significantly improving the security, reliability, flexibility and manageability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0017] Figure 1 The present invention is a flow chart of a security defense method for a trusted industrial control system.

[0018] Figure 2 This is a structural diagram of a security defense system for a trusted industrial control system of the present invention. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations.

[0020] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0021] See also Figure 1 , a security defense method for a trusted industrial control system, including the following processes: Step 1: The user authenticates in the trusted industrial control system to generate identity authentication information, assigns access rights to the user, and the user logs in to the trusted industrial control system using the identity authentication information.

[0022] S1. Based on the principle of least privilege, each user is granted only the minimum set of access rights necessary to complete the work. Define different roles according to job responsibilities, such as administrator, operator, monitor, etc., and assign corresponding access rights to trusted industrial control systems to each role. Assign access rights to specific users through roles to achieve dynamic management and flexible configuration of access rights.

[0023] Each user can have one role or multiple roles, and different roles represent corresponding access permissions.

[0024] S2. After being authenticated in the trusted industrial control system, the user generates identity authentication information, which is a user name, password, biometrics (such as fingerprint, facial recognition) or a dynamic token. A combination of identity authentication information can also be used to log in to the trusted industrial control system to improve the security of identity authentication.

[0025] Authentication process: When a user logs in, the trusted industrial control system first verifies the user's identity authentication information. Only after successful verification can the user access the resources of the trusted industrial control system.

[0026] Step 2: Configure a locking mechanism in the trusted industrial control system to lock the user's account when the user's identity authentication fails.

[0027] In the trusted industrial control system configuration, set a threshold for the number of identity authentication failures, such as 5 times. When the number of consecutive identity authentication failures of a user reaches the threshold, the trusted industrial control system automatically locks the user's account and sends a notification to the administrator and / or the user. After the user's account is locked, the administrator needs to manually unlock it or complete a specific unlocking process (such as sending an unlocking request to a specified email address and verifying the identity) to restore access rights.

[0028] Step 3: Use granular control methods to control access data for each user's access rights.

[0029] The granularity control method sets coarse-grained control and fine-grained control for each access right of the user, and sets corresponding access data. Coarse-grained control is used to control the access right of "system function (menu)", and fine-grained control is used to control the access right of underlying operation data.

[0030] Coarse-grained control: Control user access rights to system functions (such as menus and pages) through role management. For example, the administrator role can access all menus, while the operator role can only access specific menus related to their work.

[0031] Fine-grained control: Implement more sophisticated permission control on the underlying operational data, such as access permissions based on data rows, data columns, or data ranges. Ensure that users can only access the underlying operational data required for their work, and prevent the underlying operational data from being leaked or tampered with.

[0032] Step 4: The data transmission between the trusted industrial control system and the client adopts a key encryption mechanism.

[0033] An encrypted channel is established between the client and the server, and all transmitted data is encrypted before transmission. The client and server hold corresponding private keys and public keys respectively, which are used to encrypt and decrypt data. The TLS / SSL security protocol is used to encrypt and transmit data to ensure the confidentiality and integrity of the data during transmission.

[0034] Among them, TLS, Transport Layer Security, transport layer security protocol; SSL, Secure Sockets Layer, secure sockets layer protocol.

[0035] Step 5: Establish a log management system in the trusted industrial control system to record the user operation process and the operation data of the trusted industrial control system.

[0036] The trusted industrial control system provides a complete log management system, which automatically records and generates logs for user login information, such as logged-in users, login time, and operation function items. It also automatically records and generates logs for the time, data range, and execution status of application processing such as data entry, data submission, task start, and data analysis, so as to track and audit when problems occur.

[0037] The trusted industrial control system automatically records user login information (such as logged-in user, login time, IP address, etc.) and key events in the application processing process (such as data entry, data submission, task start and end, data analysis results, etc.).

[0038] Log classification: Logs are classified and stored according to their importance and type to facilitate subsequent query and analysis.

[0039] Log audit: Provides log audit function, allowing administrators or security personnel to query, analyze and generate reports on logs as needed. Through log audit, potential security issues can be discovered and handled in a timely manner.

[0040] Log protection: Encrypted storage and regular backup of logs prevents them from being tampered with or lost. At the same time, restrict access to logs to ensure that only authorized personnel can view log contents.

[0041] Step 6: The server and database of the trusted industrial control system adopt a master-slave configuration solution to improve the security of the trusted industrial control system and avoid single point failure problems.

[0042] When building a highly reliable trusted industrial control system, it is crucial to adopt a master-slave configuration solution for servers and databases. This strategy aims to eliminate the risk of single point failure through redundant design, ensuring that the trusted industrial control system can continue to operate stably in the event of high load, failure or catastrophic events.

[0043] Active / standby server deployment: The active server is responsible for handling daily business requests and data processing tasks, while the standby server keeps the data status synchronized with the active server but is in standby mode. Once the active server fails, the standby server can quickly take over the work and achieve seamless switching, thus minimizing service interruption time.

[0044] Data synchronization mechanism: To ensure data consistency between the primary and standby servers, an efficient data synchronization mechanism needs to be implemented. This usually includes real-time replication (such as log-based replication) or regular synchronization strategies to ensure that the standby server has the same data status as the primary server at any time.

[0045] Fault detection and automatic switching: Deploy an intelligent fault detection system and automatic switching logic to automatically direct business requests to the backup server when a primary server failure is detected, and initiate the necessary server recovery process.

[0046] Load balancing and resource optimization: Based on the active-standby configuration, a load balancer can be further introduced to dynamically allocate requests according to the server load, optimize resource utilization efficiency, and enhance the scalability and flexibility of the trusted industrial control system.

[0047] The load balancer is located between the client and the server cluster. Its main responsibility is to dynamically distribute client requests to different servers in the backend server cluster. By reasonably distributing requests to servers with lower loads, we can avoid overloading some servers while other servers are idle, thereby improving the overall resource utilization efficiency. By adding new servers to the server cluster, the processing capacity of the trusted industrial control system can be expanded without making major changes to the existing architecture. The load balancer will automatically distribute requests to the newly added servers. When a server fails, the load balancer can automatically remove the server from the cluster and forward the request to other healthy servers, thereby reducing the impact of single point failures on the overall availability of the trusted industrial control system. By configuring different load balancing strategies and algorithms, the load balancing behavior of the trusted industrial control system can be flexibly adjusted according to different business scenarios and needs to better adapt to business changes.

[0048] Step 7: Perform corresponding security configuration and maintenance management on the database, adjust the security policy in a timely manner according to the actual situation, and perform relevant database backups regularly.

[0049] As the core data storage component of the industrial control system, the security of the database is directly related to the stable operation and data security of the entire trusted industrial control system. Therefore, it is crucial to perform comprehensive security configuration, continuous maintenance management, and regular backup of the database.

[0050] Security configuration: Perform detailed security configuration of the database according to best practices and security standards, including but not limited to access control (such as strong password policies, IP (Internet Protocol) whitelist), permission management (principle of least privilege), data encryption (encrypted storage of sensitive data), SQL (Structured Query Language) injection protection, etc.

[0051] Maintenance management: Establish regular security audits and vulnerability scanning mechanisms to promptly discover and fix potential security risks. At the same time, monitor database performance to ensure that it can maintain good response speed and stability under high load. In addition, pay attention to database software updates and patch management, and apply security updates in a timely manner to defend against emerging threats.

[0052] Regular backup: Develop and implement strict database backup strategies, including full backup and incremental backup. Backup data should be stored on safe and reliable media, and recovery tests should be performed regularly to verify the validity and integrity of the backup. In the event of data loss or damage, data can be quickly restored from the backup to reduce losses.

[0053] See also Figure 2 The present application also provides a security defense system for a trusted industrial control system, including: Permission module, which is used to configure access permission sets for users based on their roles based on the principle of least privilege; The authentication module is used to generate identity authentication information for logging into the trusted industrial control system and use a locking mechanism to restrict the user's authentication process; The access module is used to control the access data of each user's access rights by adopting a granular control method. Coarse-grained control and fine-grained control are set for each user's access rights. The coarse-grained control is used to control the functions of the trusted industrial control system corresponding to the access rights, and the fine-grained control is used to control the underlying operating data of the trusted industrial control system corresponding to the access rights. An encryption module, used for the data transmission process of the trusted industrial control system using a key encryption mechanism; A log module, used to configure a log management method in the trusted industrial control system, and to record the user operation process and the operation data of the trusted industrial control system in real time; The load distribution module is used to distribute the server load of the trusted industrial control system using load balancing technology.

[0054] It should be noted that in the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of each module is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules can be combined or integrated into another device, or some features can be ignored or not executed. The module described as a separate component may or may not be physically separated. The component displayed as a module may be a physical unit or multiple physical units, that is, it may be located in one place, or it may be distributed in multiple different places. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment.

[0055] In addition, each module in each embodiment of the present invention may be integrated into a processing unit, each module may exist physically separately, or two or more modules may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of a software functional unit.

[0056] An electronic device provided in an embodiment of the present application includes a memory and a processor. A computer program is stored in the memory. When the processor executes the computer program, the steps of a security defense method for a trusted industrial control system described in any of the above embodiments are implemented.

[0057] Another electronic device provided in the embodiment of the present application may also include: an input port connected to the processor, used to transmit multimodal data collected by an external acquisition device to the processor; and a display unit connected to the processor, used to display the processing results of the processor to the outside world; a communication module connected to the processor, used to realize the communication between the electronic device and the outside world. The display unit can be a display panel, a laser scanning display, etc.; the communication mode adopted by the communication module includes but is not limited to mobile high-definition link technology, universal serial bus (USB, Universal Serial Bus), high-definition multimedia interface (HDMI, High-Definition Multimedia Interface), wireless connection (including wireless fidelity technology (WiFi, Wireless Fidelity), Bluetooth communication technology, low-power Bluetooth communication technology, communication technology based on IEEE802.11s), IEEE 802.11s is a standard formulated by IEEE (Institute of Electrical and Electronics Engineers) for wireless local area networks, specifically used to support the construction and management of wireless networks.

[0058] An embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of a security defense method for a trusted industrial control system described in any of the above embodiments are implemented.

[0059] The computer-readable storage medium involved in this application includes random access memory (RAM, Read-Only Memory), internal memory, read-only memory ROM, electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs (Compact Disc Read-Only Memory), or any other form of storage medium known in the technical field.

[0060] For the description of the relevant parts of the security defense system, electronic device and computer-readable storage medium of a trusted industrial control system provided in the embodiment of the present application, please refer to the detailed description of the corresponding parts in the security defense method of a trusted industrial control system provided in the embodiment of the present application, which will not be repeated here. In addition, the parts of the above technical solutions provided in the embodiment of the present application that are consistent with the implementation principles of the corresponding technical solutions in the prior art are not described in detail to avoid excessive elaboration.

[0061] The above contents are only for explaining the technical idea of ​​the present invention and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution in accordance with the technical idea proposed by the present invention shall fall within the protection scope of the claims of the present invention.

Claims

1. A security defense method for a trusted industrial control system, characterized in that: include: Based on the principle of least privilege, configure access permission sets for users according to their roles; Generate identity authentication information for logging into the trusted industrial control system, and use a locking mechanism to restrict the user's authentication process; Use granular control methods to control the access data of each user's access rights. Set coarse-grained control and fine-grained control for each user's access rights. Coarse-grained control is used to control the functions of the trusted industrial control system corresponding to the access rights, and fine-grained control is used to control the underlying operating data of the trusted industrial control system corresponding to the access rights. The data transmission process of the trusted industrial control system adopts a key encryption mechanism; The trusted industrial control system is configured with a log management method for real-time recording of user operation processes and operation data of the trusted industrial control system; Load balancing technology is used to distribute the server load of the trusted industrial control system.

2. A security defense method for a trusted industrial control system according to claim 1, characterized in that: The identity authentication information includes user name, password, biometric information and / or dynamic token.

3. The security defense method of a trusted industrial control system according to claim 1, characterized in that: The locking mechanism is used to restrict the user's authentication process, including: Set a threshold for the number of authentication failures in the trusted industrial control system. When a user's consecutive authentication failures reach the threshold, the user's account will be automatically locked.

4. The security defense method of a trusted industrial control system according to claim 1, characterized in that: The data transmission process of the trusted industrial control system adopts a key encryption mechanism, including: An encrypted channel is established between the server and the client of the trusted industrial control system, and the transmitted data is transmitted after being encrypted. The client and the server respectively hold corresponding private keys and public keys for encrypting and decrypting data.

5. A security defense method for a trusted industrial control system according to claim 4, characterized in that: The key encryption mechanism uses the TLS / SSL security protocol to encrypt and transmit data.

6. A security defense method for a trusted industrial control system according to claim 1, characterized in that: It also includes that the server and database of the trusted industrial control system adopt an active-standby configuration.

7. A security defense method for a trusted industrial control system according to claim 1, characterized in that: The configuration log management method in the trusted industrial control system includes: Generate logs based on the operation data of the trusted industrial control system; Categorize logs according to their importance and type; Audit classified logs to obtain and handle security issues of trusted industrial control systems; Log protection: Encrypted storage and regular backup of logs to prevent logs from being tampered with or lost, and limit access rights to logs.

8. A security defense system for a trusted industrial control system, characterized in that: include: Permission module, which is used to configure access permission sets for users based on their roles based on the principle of least privilege; The authentication module is used to generate identity authentication information for logging into the trusted industrial control system and use a locking mechanism to restrict the user's authentication process; The access module is used to control the access data of each user's access rights by adopting a granular control method. Coarse-grained control and fine-grained control are set for each user's access rights. The coarse-grained control is used to control the functions of the trusted industrial control system corresponding to the access rights, and the fine-grained control is used to control the underlying operating data of the trusted industrial control system corresponding to the access rights. An encryption module, used for the data transmission process of the trusted industrial control system using a key encryption mechanism; A log module, used to configure a log management method in the trusted industrial control system, and to record the user operation process and the operation data of the trusted industrial control system in real time; The load distribution module is used to distribute the server load of the trusted industrial control system using load balancing technology.

9. An electronic device, characterized in that: include: Memory for storing computer programs; A processor, used to implement the steps of a security defense method for a trusted industrial control system as described in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of a security defense method for a trusted industrial control system as described in any one of claims 1 to 7 are implemented.

Images