Data processing method and system for industrial control safety system

Abstract

The application relates to the technical field of industrial control data processing, and discloses a data processing method and system for an industrial control safety system, which comprises the following steps: collecting equipment data and network data; calculating an equipment reliability index according to the number of equipment faults and the frequency of equipment faults, calculating an equipment state value according to the equipment reliability index and the success rate of equipment maintenance, and determining the equipment maintenance frequency based on the similarity between the equipment state value and historical data; judging whether the network needs to be maintained according to a network security index, calculating a current network state value based on the network security index and network attack response conditions, and determining the network maintenance frequency according to the network state value; calculating a comprehensive state value of the industrial control safety system according to the equipment state value and the network state value, and determining the regular synchronization maintenance frequency of the equipment and the network according to the comprehensive state value. The application realizes dynamic maintenance and management of the equipment and the network, and significantly improves the stability and safety of the industrial control system.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of industrial control data processing, in particular to a data processing method and system for an industrial control security system. BACKGROUND

[0002] With the rapid development of industrial automation and informatization, industrial control systems (ICS) play a vital role in modern manufacturing and infrastructure. However, with the popularization of the Internet and the deepening of device interconnection, the security and reliability of industrial control systems are facing increasingly severe challenges. Industrial control systems not only involve the operation of devices, but also include real-time data exchange with external networks, which makes them more vulnerable to complex risks when facing device failures and network attacks.

[0003] In traditional industrial control system management, device maintenance and network security protection often adopt methods based on experience or regular inspection, which has problems such as inaccurate maintenance frequency, uncoordinated device and network maintenance, etc., which can easily lead to device failure not being discovered in time or network attacks not being responded to in time, resulting in production stagnation, economic losses, and even threats to public safety.

[0004] Therefore, it is necessary to provide a data processing method and system for an industrial control security system to solve the problems of inaccurate maintenance frequency and uncoordinated device and network maintenance in traditional industrial control system management. SUMMARY

[0005] In view of this, the present application provides a data processing method and system for an industrial control security system, aiming to solve the problems of inaccurate maintenance frequency and uncoordinated device and network maintenance in traditional industrial control system management.

[0006] On the one hand, the present application provides a data processing method for an industrial control security system, comprising:

[0007] Collecting device data and network data; wherein the device data includes device failure frequency, device failure frequency and device repair success rate; the network data includes transmission data encryption, network attack frequency and network attack response;

[0008] According to the device failure frequency and device failure frequency, the device reliability index is calculated, the device state value is calculated according to the device reliability index and the device repair success rate, and the device maintenance frequency is determined based on the similarity of the device state value and historical data;

[0009] calculating a network security index based on the data encryption condition and the number of network attacks, determining whether the network needs to be maintained according to the network security index, calculating a current network state value based on the network security index and a network attack response condition when it is determined that the network needs to be maintained, and determining a network maintenance frequency according to the network state value;

[0010] calculating a comprehensive state value of the industrial control security system according to the device state value and the network state value, and determining a device and network regular synchronization maintenance frequency according to the comprehensive state value.

[0011] Further, when calculating the device reliability index according to the number of device faults and the device fault frequency, the method comprises:

[0012] The device reliability index is calculated by the following formula:

[0013]

[0014] In the above formula, R represents the device reliability index, N represents the number of device faults, T represents the total running time of the device, λ represents the device fault frequency, wherein λ=N / T, a represents the weight coefficient of the number of device faults, and b represents the weight coefficient of the device fault frequency, wherein the value range of a and b is 0-1.

[0015] Further, when calculating the device state value according to the device reliability index and the device maintenance success rate, the method comprises:

[0016] The device state value is calculated by the following formula:

[0017]

[0018] In the above formula, V represents the device state value, R represents the device reliability index, and S represents the device maintenance success rate.

[0019] Further, when determining the device maintenance frequency based on the similarity between the device state value and historical data, the method comprises:

[0020] If there is a historical device state value identical to the device state value in the historical data, the historical device maintenance frequency corresponding to the historical device state value is taken as the current device maintenance frequency.

[0021] If there is no historical device state value identical to the device state value in the historical data, a first state value and a second state value are set, wherein the first state value is smaller than the second state value.

[0022] If the device state value is smaller than or equal to the first state value, the first maintenance frequency is taken as the device maintenance frequency.

[0023] If the device status value is greater than the first status value and less than or equal to the second status value, the second maintenance frequency is used as the device maintenance frequency;

[0024] If the device status value is greater than the second status value, the third maintenance frequency is used as the device maintenance frequency;

[0025] The first maintenance frequency is greater than the second maintenance frequency, and the second maintenance frequency is greater than the third maintenance frequency.

[0026] Furthermore, the calculation of the network security index based on data encryption status and the number of network attacks includes:

[0027] The encryption status is the percentage of successful data encryption;

[0028] The cybersecurity index is calculated based on the percentage of successful data encryption and the number of network attacks using the following formula:

[0029]

[0030] In the above formula, I represents the network security index, E represents the percentage of successful data encryption, A represents the number of network attacks, α represents the encryption adjustment coefficient, and β represents the network attack adjustment coefficient. The value range of α and β is 0-1.

[0031] Furthermore, the determining whether network maintenance is required based on the network security index includes:

[0032] Setting a minimum network security index value, and if the network security index value is less than or equal to the minimum network security index value, determining that network maintenance is required;

[0033] If the network security index is greater than the minimum value of the network security index, it is determined that network maintenance is not required.

[0034] Furthermore, when it is determined that network maintenance is required, the current network status value is calculated based on the network security index and the network attack response situation, including:

[0035] The network attack response situation includes attack response time, measure response time, recovery time and recovery success rate;

[0036] Calculate the average attack response time, average measure response time, average recovery time and recovery success rate;

[0037] The current network status value is calculated using the following formula:

[0038]

[0039] In the above formula, Z represents a network state value, I represents a network security index, Tg represents an average attack response time, Tc represents an average measure response time, Th represents an average recovery time, L represents a recovery success rate, c represents an average attack response time adjustment coefficient, d represents an average measure response time adjustment coefficient, e represents an average recovery time adjustment coefficient, and f represents a recovery success rate adjustment coefficient, wherein the values of c, d, e, and f are in the range of 0-1.

[0040] Further, when determining the network maintenance frequency according to the network state value, the method comprises:

[0041] If there is a historical network state value identical to the network state value in the historical data, the historical network maintenance frequency corresponding to the historical network state value is taken as the current network maintenance frequency.

[0042] If there is no historical network state value identical to the network state value in the historical data, a first network state value and a second network state value are set, wherein the first network state value is smaller than the second network state value.

[0043] If the network state value is smaller than or equal to the first network state value, the first network maintenance frequency is taken as the network maintenance frequency.

[0044] If the network state value is greater than the first network state value and smaller than or equal to the second network state value, the second network maintenance frequency is taken as the network maintenance frequency.

[0045] If the network state value is greater than the second network state value, the third network maintenance frequency is taken as the network maintenance frequency.

[0046] The first network maintenance frequency is greater than the second network maintenance frequency, and the second network maintenance frequency is greater than the third network maintenance frequency.

[0047] Further, when calculating a comprehensive state value of the industrial control security system according to the device state value and the network state value, and determining the device and network periodic synchronization maintenance frequency according to the comprehensive state value, the method comprises:

[0048] The comprehensive state value is a sum value of the device state value and the network state value, and the device and network periodic synchronization maintenance frequency is determined according to the sum value.

[0049] A first sum value and a second sum value are set, wherein the first sum value is smaller than the second sum value.

[0050] If the comprehensive state value is smaller than the first sum value, the periodic synchronization maintenance frequency is the first frequency.

[0051] if the comprehensive state value is greater than or equal to the first sum value and less than or equal to the second sum value, the periodic synchronous maintenance frequency is a second frequency;

[0052] if the comprehensive state value is greater than the second sum value, the periodic synchronous maintenance frequency is a third frequency;

[0053] wherein the first frequency is greater than the second frequency, and the second frequency is greater than the third frequency.

[0054] Compared with the prior art, the present application has the beneficial effects that the present application realizes dynamic maintenance and management of devices and networks, significantly improving the stability and security of the industrial control system. First, by calculating the device reliability index and state value based on parameters such as device failure frequency, failure frequency and repair success rate, the health status of the device can be accurately evaluated to determine the appropriate device maintenance frequency. This not only avoids over-maintenance, but also reduces the risk of device failure. Second, based on network data such as data encryption, network attack frequency and response, the network security index is calculated to determine whether maintenance is needed to ensure timely protection of the network under attack threats. Further, by calculating the network state value based on the network security index and network attack response, the appropriate network maintenance frequency is determined. Most importantly, by considering the state values of devices and networks, the system can automatically adjust the periodic synchronous maintenance frequency of devices and networks to ensure their coordinated operation under an optimized maintenance plan, reducing system failures and security risks. This method not only improves the overall security and response capability of the industrial control system, but also reduces the operation and maintenance cost and the risk of human error through intelligent data analysis, providing a solid guarantee for long-term reliable operation.

[0055] On the other hand, the present application also provides a data processing system for an industrial control security system, comprising:

[0056] The acquisition module is configured to acquire device data and network data; wherein the device data includes device failure frequency, device failure frequency and device repair success rate; the network data includes transmission data encryption, network attack frequency and network attack response;

[0057] The device processing module is configured to calculate the device reliability index based on the device failure frequency and the device failure frequency, calculate the device state value based on the device reliability index and the device repair success rate, and determine the device maintenance frequency based on the similarity of the device state value and the historical data;

[0058] a network processing module configured to calculate a network security index based on the data encryption condition and the number of network attacks, determine whether the network needs to be maintained according to the network security index, calculate a current network state value based on the network security index and the network attack response condition when it is determined that the network needs to be maintained, and determine a network maintenance frequency according to the network state value;

[0059] a comprehensive processing module configured to calculate a comprehensive state value of the industrial control security system according to the device state value and the network state value, and determine a device and network periodic synchronization maintenance frequency according to the comprehensive state value.

[0060] It can be understood that the industrial control security system data processing method and system provided by the present application have the same beneficial effects, which will not be described here. BRIEF DESCRIPTION OF DRAWINGS

[0061] Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The accompanying drawings are included to provide a description of the preferred embodiments and are not intended to limit the scope of the present application. Moreover, the same reference numerals are used throughout the same figures. In the drawings:

[0062] Figure 1 a flowchart of the industrial control security system data processing method provided by the embodiments of the present application;

[0063] Figure 2 a function block diagram of the industrial control security system data processing system provided by the embodiments of the present application. DETAILED DESCRIPTION

[0064] Exemplary embodiments of the present disclosure will be described in detail with reference to the drawings. Although the exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided so that the present disclosure can be more thoroughly understood and the scope of the present disclosure can be accurately conveyed to those skilled in the art. It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict. The present application will be described in detail below with reference to the drawings and in conjunction with the embodiments.

[0065] In some embodiments of the present application, referring to Figure 1 The present embodiment provides an industrial control security system data processing method, which comprises the following steps:

[0066] S100, collecting device data and network data; wherein the device data includes the number of device failures, the device failure frequency and the device repair success rate; the network data includes the transmission data encryption condition, the number of network attacks and the network attack response condition;

[0067] S200, calculating a device reliability index according to the number of device failures and the device failure frequency, calculating a device state value according to the device reliability index and a device maintenance success rate, determining a device maintenance frequency based on a similarity of the device state value and historical data;

[0068] S300, calculating a network security index based on data encryption conditions and the number of network attacks, judging whether network maintenance is needed according to the network security index, when it is judged that network maintenance is needed, calculating a current network state value based on the network security index and network attack response conditions, determining a network maintenance frequency according to the network state value;

[0069] S400, calculating a comprehensive state value of the industrial control security system according to the device state value and the network state value, determining a device and network regular synchronization maintenance frequency according to the comprehensive state value.

[0070] It can be understood that the present application realizes dynamic maintenance and management of devices and networks, and significantly improves the stability and security of the industrial control system. First, by using parameters such as the number of device failures, failure frequency and maintenance success rate, the device reliability index and state value are calculated, which can accurately evaluate the health status of the device, so as to determine the appropriate device maintenance frequency. This not only avoids over-maintenance, but also reduces the risk caused by device failure. Secondly, based on network data such as data encryption conditions, the number of network attacks and response conditions, the network security index is calculated, and it is judged whether maintenance is needed to ensure that the network is protected in time under the threat of attack. Further, the network state value is calculated based on the network security index and the network attack response conditions, and the appropriate network maintenance frequency is determined. Most importantly, by comprehensively considering the state values of the device and the network, the system can automatically adjust the regular synchronization maintenance frequency of the device and the network, ensure that they operate cooperatively under the optimized maintenance plan, and reduce system failure and security risks. This method not only improves the overall security and response capability of the industrial control system, but also reduces the operation and maintenance cost and the risk of human error through intelligent data analysis, providing a solid guarantee for long-term reliable operation.

[0071] In some embodiments of the present application, when calculating the device reliability index according to the number of device failures and the device failure frequency, it includes:

[0072] The device reliability index is calculated by the following formula:

[0073]

[0074] In the above formula, R represents the equipment reliability index, N represents the number of equipment failures, T represents the total equipment operation time, λ represents the equipment failure frequency, where λ = N / T, a represents the equipment failure frequency weight coefficient, and b represents the equipment failure frequency weight coefficient, where the values of a and b range from 0 to 1.

[0075] It can be understood that the present application comprehensively considers the number of equipment failures, the total equipment operation time, and the equipment failure frequency, thereby providing a comprehensive equipment performance evaluation. The introduction of the weight coefficients a and b makes the calculation more flexible and adaptive to the characteristics of different equipment. The values of a and b range from 0 to 1, allowing users to adjust the importance of the number of failures and the failure frequency in the reliability index calculation according to actual conditions. For example, for some equipment that is more sensitive to the number of failures, the value of a can be increased, while for those that are more sensitive to the failure frequency, the value of b can be increased. This calculation method not only helps users quickly identify the reliability problems of equipment, but also provides data support for maintenance decisions, thereby reducing unexpected downtime, improving the operation efficiency and life of equipment. In addition, by continuously monitoring and calculating the equipment reliability index, enterprises can better plan the maintenance cycle and spare parts inventory, achieving optimized management of costs. In summary, this equipment reliability index calculation method based on the number of failures and the failure frequency provides a scientific, efficient, and highly adaptive tool for equipment management and maintenance. Specifically, the number of equipment failures, the total equipment operation time, and the equipment failure frequency are parameters within a preset time period.

[0076] In some embodiments of the present application, when calculating the equipment state value according to the equipment reliability index and the equipment repair success rate, the following is included:

[0077] The equipment state value is calculated by the following formula:

[0078]

[0079] In the above formula, V represents the equipment state value, R represents the equipment reliability index, and S represents the equipment repair success rate.

[0080] It can be understood that the present application provides a more comprehensive and accurate equipment health assessment method by combining the equipment reliability index and the equipment maintenance success rate to calculate the equipment state value. Specifically, the calculation formula of the equipment state value not only considers the reliability of the equipment, i.e., the probability of the equipment completing the specified function under the specified conditions and within the specified time, but also considers the probability of successfully restoring the function of the equipment through maintenance after the equipment fails. Such comprehensive evaluation can more accurately reflect the actual operating state of the equipment and provide more scientific decision support for the maintenance and management of the equipment. Through this calculation method, the one-sidedness that may be caused by a single indicator can be effectively avoided, so that more reasonable arrangements can be made for equipment maintenance and resource allocation. In addition, this calculation method also facilitates the continuous tracking and dynamic evaluation of the equipment state, which helps to discover potential problems in a timely manner, prevent equipment failures, improve equipment operating efficiency and reliability, and ultimately achieve optimized management of the equipment life cycle. Specifically, the equipment maintenance success rate is a parameter within a preset time period.

[0081] In some embodiments of the present application, when determining the equipment maintenance frequency based on the similarity of the equipment state value and the historical data, the following steps are included:

[0082] If there is a historical equipment state value in the historical data that is the same as the equipment state value, the historical equipment maintenance frequency corresponding to the historical equipment state value is taken as the current equipment maintenance frequency;

[0083] If there is no historical equipment state value in the historical data that is the same as the equipment state value, a first state value and a second state value are set; wherein the first state value is less than the second state value;

[0084] If the equipment state value is less than or equal to the first state value, the first maintenance frequency is taken as the equipment maintenance frequency;

[0085] If the equipment state value is greater than the first state value and less than or equal to the second state value, the second maintenance frequency is taken as the equipment maintenance frequency;

[0086] If the equipment state value is greater than the second state value, the third maintenance frequency is taken as the equipment maintenance frequency;

[0087] Wherein, the first maintenance frequency is greater than the second maintenance frequency, and the second maintenance frequency is greater than the third maintenance frequency.

[0088] It can be understood that in some embodiments of the present application, the present application can ensure that the frequency of equipment maintenance is closely related to the actual operating condition of the equipment, thereby improving the pertinence and effectiveness of maintenance. When there is a historical equipment state value in the historical data that is the same as the current equipment state value, the corresponding historical maintenance frequency is directly adopted, which not only simplifies the decision-making process, but also utilizes past experience to guide the current maintenance work, ensuring that the equipment is properly maintained under similar conditions. Secondly, when there is no same condition in the historical data as the current equipment state value, by setting the first state value and the second state value, and determining different maintenance frequencies according to the comparison results of the equipment state value and the two state values, this method provides a flexible maintenance strategy. In this way, a reasonable maintenance plan can be made for equipment with equipment state values in different ranges, thereby avoiding the problems of over-maintenance or insufficient maintenance. Specifically, if the equipment state value is low, a higher maintenance frequency can be used to ensure stable operation of the equipment; if the equipment state value is in the medium range, a medium maintenance frequency is used; and if the equipment state value is high, indicating that the equipment may face greater risks, a lower maintenance frequency is used, which can timely discover and solve problems and avoid equipment failure. In summary, this maintenance frequency determination method based on the similarity of the equipment state value and the historical data not only improves the accuracy and efficiency of maintenance, but also flexibly adjusts the maintenance strategy according to the actual operating condition of the equipment, thereby prolonging the service life of the equipment, reducing maintenance costs, and ensuring stable operation of the equipment.

[0089] In some embodiments of the present application, when calculating the network security index based on the data encryption situation and the number of network attacks, the following steps are included:

[0090] The encryption situation is the proportion of successful data encryption;

[0091] The network security index is calculated according to the proportion of successful data encryption and the number of network attacks by the following formula:

[0092]

[0093] In the above formula, I represents the network security index, E represents the proportion of successful data encryption, A represents the number of network attacks, a represents the encryption situation adjustment coefficient, and β represents the number of network attack adjustment coefficient, wherein the value range of a and β is 0-1.

[0094] It can be understood that in some embodiments of the present application, the method of calculating the network security index includes considering the success rate of data encryption and the frequency of network attacks. Specifically, the network security index calculation formula combines the data encryption success rate (E) and the number of network attacks (A), while introducing two adjustment coefficients a and β. These two coefficients are used to adjust the influence of encryption and the number of network attacks on the network security index, and their value range is between 0 and 1. In this way, when the success rate of data encryption is high, the network security index will be correspondingly improved; the more the number of network attacks, the lower the network security index. Such a calculation method can intuitively reflect the security status of the network, helping relevant management personnel to take timely measures to enhance the protection capability of the network. Specifically, the data encryption success rate and the number of network attacks are parameters in a preset time period.

[0095] In some embodiments of the present application, when determining whether the network needs to be maintained according to the network security index, the following steps are included:

[0096] Setting a minimum value of the network security index, if the network security index is less than or equal to the minimum value of the network security index, it is determined that the network needs to be maintained;

[0097] If the network security index is greater than the minimum value of the network security index, it is determined that the network does not need to be maintained.

[0098] It can be understood that in some embodiments of the present application, by setting the minimum value of the network security index to determine whether the network needs to be maintained, when the network security index is less than or equal to the set minimum value, it is automatically determined that the network needs to be maintained, which helps to discover and solve network security problems in time and prevent potential security threats. On the contrary, if the network security index is greater than the minimum value, the system determines that the network is in a safe state and does not need to be maintained. This method simplifies the network security management process, improves efficiency, and ensures the stable operation of the network and the security of data.

[0099] In some embodiments of the present application, when it is determined that the network needs to be maintained, the current network state value is calculated based on the network security index and the network attack response situation, including:

[0100] The network attack response situation includes attack response time, measure response time, recovery time and recovery success rate;

[0101] The average attack response time, the average measure response time, the average recovery time and the recovery success rate are calculated;

[0102] The current network state value is calculated by the following formula:

[0103]

[0104] In the above formula, Z represents the network state value, I represents the network security index, Tg represents the average attack response time, Tc represents the average measure response time, Th represents the average recovery time, L represents the recovery success rate, c represents the average attack response time adjustment coefficient, d represents the average measure response time adjustment coefficient, e represents the average recovery time adjustment coefficient, and f represents the recovery success rate adjustment coefficient, wherein the values of c, d, e, and f are in the range of 0-1.

[0105] It can be understood that in the embodiments of the present application, when network maintenance is needed, the current network state value is evaluated by calculating the network security index and the network attack response situation, and multiple key indicators of network attack response are comprehensively considered, including attack response time, measure response time, recovery time, and recovery success rate. These indicators can comprehensively reflect the security situation and attack response ability of the network. By calculating the average attack response time, the average measure response time, the average recovery time, and the recovery success rate, a quantitative network state value Z can be obtained. This value not only considers the network security index I, but also weights different response times and recovery success rates through adjustment coefficients c, d, e, and f, so that the evaluation of network state is more accurate and dynamic. The values of the adjustment coefficients are in the range of 0 to 1, ensuring that the importance of different indicators can be flexibly adjusted according to actual conditions during calculation. The present application provides a standardized and quantitative indicator to measure the health status of the network, so that network maintenance personnel can quickly identify the problem and take appropriate maintenance measures. In addition, this method can also help network managers monitor the trend of network state changes and timely discover potential security threats, thereby improving the overall security and stability of the network. In this way, network maintenance becomes more proactive and efficient, which helps to reduce the loss and impact caused by network attacks. Specifically, the average attack response time, the average measure response time, the average recovery time, and the recovery success rate are the average values and parameters in a preset time period.

[0106] In some embodiments of the present application, when determining the network maintenance frequency according to the network state value, the following steps are included:

[0107] If there is a historical network state value in the historical data that is the same as the network state value, the historical network maintenance frequency corresponding to the historical network state value is taken as the current network maintenance frequency;

[0108] If there is no historical network state value in the historical data that is the same as the network state value, a first network state value and a second network state value are set; wherein the first network state value is less than the second network state value;

[0109] If the network state value is less than or equal to the first network state value, the first network maintenance frequency is taken as the network maintenance frequency;

[0110] if the network state value is greater than the first network state value and less than or equal to the second network state value, the second network maintenance frequency is taken as the network maintenance frequency;

[0111] if the network state value is greater than the second network state value, the third network maintenance frequency is taken as the network maintenance frequency;

[0112] wherein the first network maintenance frequency is greater than the second network maintenance frequency, and the second network maintenance frequency is greater than the third network maintenance frequency.

[0113] It can be understood that the present application can optimize the maintenance plan according to the historical performance of the network state. Specifically, if the current network state value matches a value in the historical data, the corresponding historical maintenance frequency can be directly adopted, which can utilize past experience to guide the current maintenance work and improve efficiency. If the current network state value does not have a direct corresponding value in the historical data, the system will determine the maintenance frequency according to the set first and second network state values. When the network state value is low, a higher maintenance frequency (first network maintenance frequency) is adopted, which helps to discover and solve potential problems in a timely manner and prevent network failures. When the network state value is at a medium level, a medium maintenance frequency (second network maintenance frequency) is adopted, which can ensure network stability while avoiding resource waste caused by excessive maintenance. When the network state value is high, a lower maintenance frequency (third network maintenance frequency) is adopted, which may be because the network is already in a less stable state, and frequent maintenance may exacerbate the problem. Through this layered maintenance frequency setting, network maintenance work can be more flexible and efficient, ensuring the stability and reliability of the network.

[0114] In some embodiments of the present application, a comprehensive state value of the industrial control safety system is calculated according to the device state value and the network state value, and the device and network periodic synchronization maintenance frequency is determined according to the comprehensive state value, comprising:

[0115] The comprehensive state value is the sum of the device state value and the network state value, and the device and network periodic synchronization maintenance frequency is determined according to the sum;

[0116] The first and second sums are set, and the first sum is less than the second sum;

[0117] if the comprehensive state value is less than the first sum, the periodic synchronization maintenance frequency is the first frequency;

[0118] if the comprehensive state value is greater than or equal to the first sum and less than or equal to the second sum, the periodic synchronization maintenance frequency is the second frequency;

[0119] if the comprehensive state value is greater than the second sum, the periodic synchronization maintenance frequency is the third frequency;

[0120] Wherein, the first frequency is greater than the second frequency, and the second frequency is greater than the third frequency.

[0121] It can be understood that the application optimizes the periodic synchronization maintenance frequency of the equipment and the network by calculating the comprehensive state value of the industrial control safety system. The comprehensive state value is the sum of the equipment state value and the network state value, and this calculation method can comprehensively reflect the overall operation condition of the equipment and the network. By setting different sum value thresholds (first sum value and second sum value), the maintenance frequency can be flexibly adjusted. When the comprehensive state value is low, i.e. the equipment and network condition is good, a higher periodic synchronization maintenance frequency (first frequency) is adopted to maintain the optimal operation state of the system; when the comprehensive state value is at a medium level, a medium maintenance frequency (second frequency) is adopted to balance the maintenance cost and system stability; and when the comprehensive state value is high, indicating a potential risk, a lower maintenance frequency (third frequency) is adopted for more in-depth inspection and repair. This hierarchical maintenance strategy helps to improve maintenance efficiency, reduce unnecessary maintenance cost, and at the same time ensure the safety and reliability of the system. Specifically, the periodic synchronization maintenance frequency does not conflict with the above-mentioned equipment maintenance frequency and network maintenance frequency.

[0122] On the other hand, referring to Figure 2 The application also provides a data processing system for industrial control safety system, for applying the above-mentioned data processing method for industrial control safety system, comprising:

[0123] The acquisition module is configured to acquire equipment data and network data; wherein the equipment data includes equipment failure times, equipment failure frequency and equipment repair success rate; the network data includes transmission data encryption condition, network attack times and network attack response condition;

[0124] The equipment processing module is configured to calculate the equipment reliability index according to the equipment failure times and the equipment failure frequency, calculate the equipment state value according to the equipment reliability index and the equipment repair success rate, and determine the equipment maintenance frequency based on the similarity of the equipment state value and historical data;

[0125] The network processing module is configured to calculate the network security index based on the data encryption condition and the network attack times, judge whether the network needs to be maintained according to the network security index, calculate the current network state value based on the network security index and the network attack response condition when it is judged that the network needs to be maintained, and determine the network maintenance frequency according to the network state value;

[0126] The comprehensive processing module is configured to calculate the comprehensive state value of the industrial control safety system according to the equipment state value and the network state value, and determine the periodic synchronization maintenance frequency of the equipment and the network according to the comprehensive state value.

[0127] It can be understood that, by means of the acquisition module, the system can monitor the key data of the equipment and the network in real time, such as the number of equipment failures, the frequency, the maintenance success rate, the data encryption situation, the number of network attacks and the response situation, which helps to discover potential problems in time and take measures. The equipment processing module can intelligently determine the equipment maintenance frequency by calculating the equipment reliability index and the state value, thereby improving the equipment operation efficiency and reliability. The network processing module determines the necessity of network maintenance through the network security index, and calculates the network state value to ensure the stability and security of the network. The comprehensive processing module further integrates the equipment and network state values, calculates the comprehensive state value of the industrial control safety system, and determines the regular synchronous maintenance frequency of the equipment and the network according to the comprehensive state value, which helps to realize the optimized management of the entire system. In general, the data processing system can improve the safety and efficiency of the industrial control system, reduce the maintenance cost, and ensure the continuity and stability of the industrial production process.

[0128] Those skilled in the art will appreciate that embodiments of the application can be supplied as methods, systems or computer program products. Accordingly, the application can be embodied in the form of complete hardware embodiments, complete software embodiments or embodiments combining software and hardware aspects. Furthermore, the application can be embodied in the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk memory, CD-ROMs, optical memory and the like) having computer usable program code embodied thereon.

[0129] The application is described with reference to flowcharts and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, a special purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions, which are executed via the processor of the computer or other programmable data processing device, generate a means for implementing the functions specified in the flowcharts and / or block diagrams. Figure 1 one or more flows and / or blocks Figure 1 an apparatus for performing the functions specified in the flowcharts and / or block diagrams.

[0130] These computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce a product including instruction means, which implement the functions specified in the flowcharts and / or block diagrams. Figure 1 one or more flows and / or blocks Figure 1 an apparatus for performing the functions specified in the flowcharts and / or block diagrams.

[0131] These computer program instructions can also be loaded into a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks. Figure 1 one or more flowcharts and / or blocks Figure 1 one or more flowcharts and / or blocks

[0132] Finally, it should be noted that the above-mentioned embodiments are merely used to illustrate the technical solutions of the present application, rather than limit the technical solutions of the present application. Although the present application has been described in detail with reference to the above-mentioned embodiments, those skilled in the art should understand that the specific embodiments of the present application can be modified or replaced equivalently without departing from the spirit and scope of the present application, and any modification or equivalent replacement without departing from the spirit and scope of the present application should be covered in the protection scope of the claims of the present application.

Claims

1. A data processing method for an industrial control security system, characterized by, The method comprises the following steps: Collecting device data and network data; wherein, the device data comprises device failure times, device failure frequency and device maintenance success rate; the network data comprises transmission data encryption situation, network attack times and network attack response situation; According to the device failure times and the device failure frequency, a device reliability index is calculated: In the formula, R represents the device reliability index, N represents the device failure times, T represents the total operation time of the device, λ represents the device failure frequency, wherein λ=N / T, a represents the device failure times weight coefficient, and b represents the device failure frequency weight coefficient, wherein the value ranges of a and b are both 0-1; according to the device reliability index and the device maintenance success rate, a device state value is calculated: In the formula, V represents the device state value, R represents the device reliability index, and S represents the device maintenance success rate; based on the similarity of the device state value and historical data, a device maintenance frequency is determined; if there is a historical device state value same as the device state value in the historical data, the historical device maintenance frequency corresponding to the historical device state value is taken as the current device maintenance frequency; if there is no historical device state value same as the device state value in the historical data, a first state value and a second state value are set; wherein the first state value is less than the second state value; if the device state value is less than or equal to the first state value, a first maintenance frequency is taken as the device maintenance frequency; if the device state value is greater than the first state value and less than or equal to the second state value, a second maintenance frequency is taken as the device maintenance frequency; if the device state value is greater than the second state value, a third maintenance frequency is taken as the device maintenance frequency; wherein the first maintenance frequency is greater than the second maintenance frequency, and the second maintenance frequency is greater than the third maintenance frequency. Calculating a network security index based on the data encryption situation and the network attack times, and determining whether the network needs to be maintained according to the network security index; when it is determined that the network needs to be maintained, calculating a current network state value based on the network security index and the network attack response situation, and determining a network maintenance frequency according to the network state value; Calculating a comprehensive state value of the industrial control security system according to the device state value and the network state value, and determining a device and network regular synchronous maintenance frequency according to the comprehensive state value.

2. The data processing method for an industrial control safety system according to claim 1, characterized by, When the network security index is calculated based on the data encryption situation and the network attack times, the method comprises the following steps: The encryption situation is the proportion of successful data encryption; The network security index is calculated according to the proportion of successful data encryption and the network attack times by the following formula: In the above formula, I represents a network security index, E represents a data encryption success ratio, A represents a network attack frequency, a represents an encryption condition adjustment coefficient, and β represents a network attack frequency adjustment coefficient, wherein the value ranges of a and β are both 0-1.

3. The data processing method for an industrial control safety system according to claim 2, characterized by, When it is determined whether the network needs to be maintained according to the network security index, the method comprises the following steps: Setting a minimum network security index value; if the network security index is less than or equal to the minimum network security index value, it is determined that the network needs to be maintained; If the network security index is greater than the minimum network security index value, it is determined that the network does not need to be maintained.

4. The data processing method for an industrial control safety system according to claim 3, characterized by, When it is determined that the network needs to be maintained, the current network state value is calculated based on the network security index and the network attack response situation, and the method comprises the following steps: The network attack response situation comprises attack response time, measure response time, recovery time and recovery success rate; Calculating attack average response time, measure average response time, average recovery time and recovery success rate; The current network state value is calculated by the following formula: In the above formula, Z represents a network state value, I represents a network security index, Tg represents an average attack response time, Tc represents an average measure response time, Th represents an average recovery time, L represents a recovery success rate, c represents an average attack response time adjustment coefficient, d represents an average measure response time adjustment coefficient, e represents an average recovery time adjustment coefficient, and f represents a recovery success rate adjustment coefficient, wherein the values of c, d, e, and f are all in the range of 0-1.

5. The data processing method for an industrial control safety system according to claim 4, characterized by, When the network maintenance frequency is determined according to the network state value, the method comprises the following steps: If there is a historical network state value in the historical data that is the same as the network state value, the historical network maintenance frequency corresponding to the historical network state value is taken as the current network maintenance frequency; If there is no historical network state value in the historical data that is the same as the network state value, first and second network state values are set; wherein, the first network state value is less than the second network state value; If the network state value is less than or equal to the first network state value, the first network maintenance frequency is taken as the network maintenance frequency; If the network state value is greater than the first network state value and less than or equal to the second network state value, the second network maintenance frequency is taken as the network maintenance frequency; If the network state value is greater than the second network state value, the third network maintenance frequency is taken as the network maintenance frequency; Wherein, the first network maintenance frequency is greater than the second network maintenance frequency, and the second network maintenance frequency is greater than the third network maintenance frequency.

6. The data processing method for an industrial control safety system according to claim 5, characterized by, When the comprehensive state value of the industrial control security system is calculated according to the device state value and the network state value, and the device and network regular synchronous maintenance frequency is determined according to the comprehensive state value, the method comprises the following steps: The comprehensive state value is a sum value of the device state value and the network state value, and the device and network periodic synchronization maintenance frequency is determined according to the sum value; A first sum value and a second sum value are set, the first sum value is less than the second sum value; If the comprehensive state value is less than the first sum value, the periodic synchronization maintenance frequency is a first frequency; If the comprehensive state value is greater than or equal to the first sum value and less than or equal to the second sum value, the periodic synchronization maintenance frequency is a second frequency; If the comprehensive state value is greater than the second sum value, the periodic synchronization maintenance frequency is a third frequency; Wherein, the first frequency is greater than the second frequency, and the second frequency is greater than the third frequency.

7. A data processing system for an industrial safety system, for applying the data processing method for an industrial safety system according to any one of claims 1 to 6, characterized in that Comprise: The acquisition module is configured to acquire device data and network data; wherein the device data comprises device failure times, device failure frequency and device repair success rate; the network data comprises transmission data encryption condition, network attack times and network attack response condition; The device processing module is configured to calculate a device reliability index according to the device failure times and the device failure frequency, calculate a device state value according to the device reliability index and the device repair success rate, and determine a device maintenance frequency based on a similarity of the device state value and historical data; The network processing module is configured to calculate a network security index based on the data encryption condition and the network attack times, judge whether the network needs to be maintained according to the network security index, calculate a current network state value based on the network security index and the network attack response condition when it is judged that the network needs to be maintained, and determine a network maintenance frequency according to the network state value; The comprehensive processing module is configured to calculate a comprehensive state value of the industrial control safety system according to the device state value and the network state value, and determine a device and network periodic synchronization maintenance frequency according to the comprehensive state value.

Images