Network intrusion alarm method and system based on nuclear power plant

Abstract

The invention discloses a network intrusion alarm method based on a nuclear power plant. The method comprises the steps that data information sent by a visit object is detected, wherein the detection comprises misuse detection and protocol anomaly data detection; if the detection result of the data information is abnormal, real-time early warning information is generated; the real-time early warning information and historical early warning information in a database are matched; and if the matching result of the real-time early warning information and the historical early warning information does not accord with a preset matching value, intrusion alarm information is issued. The network intrusion alarm method based on the nuclear power plant, which is provided by the invention, can effectively meet the requirement of network security protection of an industrial network of the nuclear power plant. In addition, the invention further discloses a network intrusion alarm system based on the nuclear power station.

Description

technical field [0001] The invention belongs to the field of nuclear power plant security, and more particularly, the invention relates to a nuclear power plant-based network intrusion alarm method and system. Background technique [0002] Intrusion Detection System (IDS) refers to a system that identifies and deals with malicious use of computer and network resources. As the scale of the network becomes larger and larger, the resources on the network become more and more abundant, the threats from the network also become more and more, and the attacks become more and more secretive. The data of nuclear power operation is related to national security and social stability. Therefore, it is imperative to construct a network security system to ensure the security of data centers. The industrial control system, including the nuclear power plant control system, is an independent network because it is not connected to the Internet network. Under normal circumstances, there is no...

AI Technical Summary

Problems solved by technology

However, there is no commercial intrusion detection system deployed in the nuclear power control system for network defense, or the deployed commercial intrusion detection system is also a misuse detection-based intrusion detection system

Since the nuclear power industrial network is not connected to the Internet, the virus database for intrusion detection cannot be updated in time in the nuclear power industrial network, and commercial intrusion detection systems cannot detect new viruses or viruses designed for specific industrial control systems

Images