Abnormal state monitoring method for industrial control system

Abstract

The invention provides an abnormal state monitoring method for an industrial control system. The method comprises the following steps: monitoring and extracting state information of related parts by utilizing state acquisition modules distributed in the related parts of the industrial control system; transferring the abnormal state information in the collected state information to a calculation engine module through a state communication module; compiling an abnormal state analysis algorithm through an abnormal state analysis algorithm configuration module according to the need of abnormal state analysis; carrying out periodic calculation on the abnormal state analysis algorithm through a calculation engine module, and feeding back the analysis result of the algorithm to a human-computer interface configuration module and a data centre management module in real time; carrying out system structure and abnormal event configuration through a system structure configuration module according to the need of the abnormal state analysis to generate an abnormal event library; and obtaining real-time state data and abnormal state analysis result data carried out by the human-computer interface configuration module through the calculation engine module, and displaying the data on an interface, thereby improving monitoring capability of the industrial control system for the abnormal event.

Description

technical field [0001] The invention relates to an abnormal state monitoring method for an industrial control system. Background technique [0002] With the rapid development and wide application of computer network technology and the continuous improvement of industrial production's requirements for control systems, networked control systems are more and more applied to industrial production, and the connection between industrial processes and traditional information systems is becoming more and more getting closer. This "tight connection" makes the originally physically isolated industrial control system lose its "natural barrier" from cyber attacks. Threats such as viruses and Trojan horses are spreading to the industrial control system, and the industrial control system is facing greater information than ever before. Security risks, the security situation is grim. Once information security problems occur in the industrial control systems that are produced and operated ...

AI Technical Summary

Problems solved by technology

Once information security problems occur in the industrial control systems in production and operation of various industries, it will not only directly cause losses to industrial production, but may also have a significant impact on social order, and even threaten the country's strategic security.

[0003] However, at present, most technology manufacturers’ research and development and solutions for industrial control system network security mainly stay in the development of third-party equipment or network security vulnerability monitoring systems, industrial network firewalls, security audits, and software plug-in systems for various protocols. At the level of software tools, none of the key modules such as compilation, transmission, and execution of the control system configuration data can be essentially monitored and optimized for safety, and it is still unable to effectively resist the intrusion of threats

Images