Script control method for web configuration

Abstract

The invention discloses a script control method for web configuration. The script control method is characterized by comprising the steps that a corresponding script feature library is generated in a self-learning mode according to the features of various scripts, real-time interception and verification are conducted on the scripts when web configuration software loads the scripts, the condition that the malicious scripts operate to threaten the security of the web configuration software is prevented, and threats to an industrial control system are fundamentally blocked. The script control method has the advantages that the learning mode is adopted, the features of the scripts can be automatically extracted to recognize and classify script files, the file parsing method for conducting specific parsing on the specific file forms in the traditional mode is eliminated, and later extension and maintenance are convenient while the script file recognition speed is increased.

Description

technical field [0001] The invention relates to computer security technology and computer software technology, in particular, the machine learning method provided by artificial intelligence is used to identify and classify script files, and the script files are effectively intercepted through a white list mechanism. Background technique [0002] With the rapid development of computer and Internet technology, the continuous improvement of automation and intelligent technology, a large number of smart chips and smart sensors are also emerging, which promotes the rapid development of the field of industrial control. In today's era, industrial control covers various fields including navigation and aviation, manufacturing, electric power, transportation, etc., affecting people's production and life. As a medium of human-computer interaction, web configuration software can automatically monitor the operation of industrial control systems and provide users with configurable industr...

AI Technical Summary

Problems solved by technology

The Stuxnet attack in 2010 also caused Iran's centrifuges to run out of control, causing the entire nuclear power plant network to be paralyzed

However, due to the complexity of the system operating environment and the diversity of file formats, it is difficult to control all running programs

The current common whitelist security mechanism is only to perform security checks on executable programs in the system, but there is no effective security control method for common script files such as PHP scripts, JSP scripts, and SHELL scripts in the system.

Images