基于前缀树的工控入侵检测算法

Intrusion Detection Algorithm Based on Trie for Industry Control System

随着信息技术的发展,工业和互联网紧密结合,因此,保证工业网络的安全是十分有必要的。然而,在实际的工控系统中,由于工控节点的资源受限,传统的入侵检测系统无法直接部署使用。为此,提出基于前缀树的入侵检测系统。基于前缀树的入侵检测系统中,入侵签名库虽需消耗一定存储空间,但入侵的检测效率却得到提高,可运用于工控节点上。

With the development of information technology,industry and Internet are closely integrated.Therefore,it is necessary to ensure the securi⁃ty of industrial network.However,in practical industrial control system,as a result of the industrial control nodes resource-constrained,tra⁃ditional intrusion detection system cannot be directly deployed to use.For this reason,an intrusion detection system based on Trie is pro⁃posed.Although the intrusion signature library occupies a certain amount of memory and has high detection efficiency in the intrusion de⁃tection system based on Trie,so it can be used in the industrial control node.