工业以太网信息安全通信方法的研究与实现

Research and Implementation of Information Security Communication for Industrial Ethernet

在工业互联网IT/OT相互融合的发展趋势下,工业控制网络的信息安全问题愈加凸显。分析了工业以太网存在的主要信息安全问题以及通用的解决办法,基于TLS协议进行安全通信设计,但是考虑到基于TLS协议的安全通信方法存在一些工业应用场景限制,所以针对工业以太网协议改进了安全设计,并以Modbus/TCP协议为例进行了实验测试和方案有效性分析。实验结果表明,该方案能够满足工控系统对信息安全的要求,有效防止数据窃听、篡改和伪造等常见网络攻击。

With the development of the integration of IT/OT in the industrial internet, the information security problems of industrial control networks are more and more prominent. The main information security problems existing in industrial Ethernet and the general solutions are analyzed in this paper. The secure communication is designed based on TLS protocol. However, the secure communication method based on TLS protocol has limitations in some industrial application scenarios, so the improved security design is carried out for the industrial Ethernet protocol and the experimental test and validity analysis are carried out on the Modbus/TCP protocol. The results show that this scheme can meet the requirements of industrial control systems for information security and prevent the common network attacks such as data eavesdropping, tampering and forgery effectively.