Honeypot apparatus carried in industrial control system, and industrial control system

Abstract

The invention discloses a honeypot apparatus carried in an industrial control system. The honeypot apparatus is carried on each industrial control network node according to needs and comprises an interface module which is provided with a standard interface needed for interconnection by an industrial control network grade which the honeypot apparatus is currently disposed in; and instruction receiving module which is used for receiving an instruction of a last-grade industrial control device and simulating submission of feedback data by use of a signal submission module; the signal submission module which is used for simulating signal features of various industrial devices and sending data which is similar to yet is distinguishable from other devices to the last-grade industrial control device; and a behavior recording module which is used for recording attack behavior data and giving an alarm timely when the honeypot apparatus is under an attack threat. According to the invention, the honeypot apparatus, through simulating the industrial devices carried in an industrial control network, attracts various malicious attacks, records the malicious attack behavior data and issues an early warning so as to discover threats timely and avoid greater damage caused by the malicious attacks to the industrial controls system.

Description

technical field [0001] The invention relates to the technical field of industrial control security, in particular to a honeypot device mounted in an industrial control system and the industrial control system. Background technique [0002] Industrialization and informatization are the mainstream of the development of modern society. At present, more than 80% of the industrial field has realized automatic control. The industrial control system has become an important part of the country's key infrastructure. The security of the industrial control field is related to the country's strategic security. . [0003] In recent years, industrial control security has received more and more vigilance and attention from management departments and manufacturers. The characteristics of industrial control security include: the system requires high availability, high real-time performance, and high controllability; compared with traditional information security, industrial control security...

AI Technical Summary

Problems solved by technology

The characteristics of industrial control security include: the system requires high availability, high real-time performance, and high controllability; compared with traditional information security, industrial control security has not received enough attention; compared with traditional Internet security, threats to the industrial control field will be would have more substantive serious consequences

Images