Title:
STATE RELATIONSHIP GRAPH-BASED INDUSTRIAL CONTROL FIREWALL IMPLEMENTATION METHOD
Document Type and Number:
WIPO Patent Application WO/2020/037478
Kind Code:
A1
Abstract:
The present invention relates to the field of industrial control system security, and disclosed therein is a state relationship graph-based industrial control firewall implementation method; a state relationship graph-based industrial control system firewall comprises an industrial data collection module, a state relationship graph module, a protocol analysis module, and a behavior monitoring module; in a normal state, the industrial data collection module collects real-time operation data of an industrial system; a state relationship graph of a data module is generated in the state relationship graph module, and said feature is used as a determining condition for determining whether the system operates normally; afterwards, the protocol analysis module provides data packet content of an industrial communication protocol; a state relationship graph at the moment of operation is dynamically generated; a state relationship graph at the moment of normal operation is compared in the behavior monitoring module; and if an abnormality is found, it is determined that an attack event has occurred.
Inventors:
WANG YONG (CN)
LIU WEI (CN)
LIU WEI (CN)
Application Number:
PCT/CN2018/101405
Publication Date:
February 27, 2020
Filing Date:
August 21, 2018
Export Citation:
Assignee:
SHANGHAI CLOUD SWORD INFORMATION TECH CO LTD (CN)
International Classes:
H04L29/06
Foreign References:
| CN106790235A | 2017-05-31 | |||
| CN105721498A | 2016-06-29 | |||
| CN105204487A | 2015-12-30 | |||
| EP2991305A1 | 2016-03-02 |
Download PDF:
Previous Patent: VEHICLE TRANSPORTATION PROTECTION DEVICE
Next Patent: BASKETWEAVE SMALL GINGHAM FABRIC
Next Patent: BASKETWEAVE SMALL GINGHAM FABRIC