工控系统服务安全运行技术研究

Research on Safe Operation Technology of Industrial Control System Service

针对工控系统信息安全风险日益增加的问题,给出基于CNN-Focal入侵检测模型和状态监测防火墙的可行性解决问题方法,实现对工控系统的服务安全正常运行。试验表明:状态监测防火墙流量数据包丢包率低至16.6%,受攻击状态下工控系统吞吐量与正常情况下几乎相同;与支持向量机方法相比,基于CNN-Focal入侵检测模型的损失函数综合指标更好。

Aiming at the problem of increasing information security risks of industrial control systems,a feasible solution method based on the CNN-Focal intrusion detection model and state monitoring firewall was given to realize the safe and normal operation of the services of the industrial control system.The experiments show that the packet loss rate of traffic data in a condition monitoring firewall is as low as 16.6%,and the throughput of the industrial control system under attack is almost the same as that under normal conditions;compared with the support vector machine method,the comprehensive index of loss function based on the CNN-Focal intrusion detection model is better.