Control method and system for industrial network data forwarding

Abstract

The invention provides a control method and system for industrial network data forwarding. The method comprises the following steps that an industrial network data packet is sent to a protocol stack module through a network card I, the protocol stack module forwards the industrial network data packet to an industrial control protocol connection tracking module and copies the industrial network data packet to a DPI module simultaneously; and the DPI module detects the industrial network data packet according to a preset rule, generates a forwarding strategy of the industrial network data packetand sends the forwarding strategy to a forwarding strategy issuing module. According to the control method and system for the industrial network data forwarding, the protocol stack module, the industrial control protocol connection tracking module, the DPI module, the forwarding strategy issuing module and a forwarding control module are used cooperatively, the process control of the industrial network data forwarding is realized, and the method and the system have the characteristics of high data forwarding efficiency, few system resources, strong forwarding timeliness and high data safety.

Description

technical field [0001] The invention belongs to the field of network information security, and in particular relates to a control method and system for industrial network data forwarding. Background technique [0002] With the development of modern information technology, industrial networks are gradually becoming open, interconnected and universal, and higher requirements are placed on the security of industrial networks. The real-time, stability and security of data forwarding in the industrial network must be guaranteed. [0003] Under existing technical conditions, data forwarding in industrial networks mainly adopts application layer DPI forwarding + bypass (bypass) forwarding. Receive data packets from the kernel space through the application layer DPI module, analyze the data packets, and match the packets with the rules maintained by the application layer DPI to determine the security of the packets. When the security of the packets is determined, the application la...

AI Technical Summary

Problems solved by technology

When the DPI of the application layer is busy, the forwarding efficiency will be further reduced, generally manifested as an increase in network delay, and it is difficult to meet the real-time requirements of industrial networks

When the application layer DPI module is abnormal, the industrial network traffic will be disconnected, which cannot meet the stability requirements of the industrial network

Further use Bypass forwarding, when the DPI processing of the application layer is not timely or the DPI of the application layer is abnormal, the Bypass function will be enabled. At this time, the industrial network traffic is no longer protected by security, and the data is directly sent to the downlink. It is sent to the downlink, which makes the industrial network a security risk and cannot meet its security requirements

Images