基于网络流量异常监测的工业控制系统安全技术研究

Research on Industrial Control System Security Technology Based on Network Traffic Anomaly Monitoring

访问控制作为工业控制系统的重点,还涉及总线安全参数保护等,由于工业控制网络与普通计算机网络之间的差异,导致许多安全保障方案并不能有效实施。基于网络流量异常监测的工业控制在保障控制系统安全上,不失为行之有效的控制技术。分析了网络工业控制的现状,着眼于网络流量的特性,以监视网络工业控制的安全为重点进行了相关研究。

Access control, as the focus of industrial control systems, also involves bus security parameter protection,etc. The differences between industrial control networks and ordinary computer networks lead to many security solutions that are not effectively implemented. Industrial control based on network traffic anomaly monitoring is a proven control technology in securing control systems. We analyze the current situation of networked industrial control,focus on the characteristics of network traffic, and conduct relevant research with the focus on monitoring the security of networked industrial control.