基于suricata的IEC104插件设计与实现

IEC104 Plug-in Design and Implementation based on Suricata Software Framework

工业互联网发展的过程中,针对工业协议的指令级IDS需求正在迅速增长,IEC104作为国家基础设施通信的基础工业协议是当前网络中监测、审计的重点关注协议。针对该需求,将IEC104的解析分析、监测告警及日志输出以插件模式在已有开源框架suricata中设计、开发及实现,满足当前系统需求。

In the process of industrial Internet development,the demand for directive-level IDS for industrial protocols is growing rapidly,and IEC104 as the basic industrial protocol of national infrastructure communication is the focus of monitoring and auditing in the current network.In response to this demand,the resolution analysis,monitoring alert and log output of IEC104 are designed,developed and implemented in the existing open source framework suricata in plug-in mode to meet the current system requirements.