The invention discloses a
firmware-level security
protection system and method for a hard disk of industrial
automation equipment, particularly relates to the technical field of
storage security protection, and is used for solving the problem of abnormal tampering of
firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an
instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence
library,
firmware-level judgment on operation abnormity, access
border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the
operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a
data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to
closed loop recovery by combining protected segment integrity
verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the
operation safety and the
maintainability of the firmware are integrally improved.