Industrial control system network security situation sensing system based on artificial intelligence

Abstract

The invention discloses an industrial control system network security situation sensing system based on artificial intelligence. The system comprises a virus monitoring unit, a data parsing unit, a data fusion and calculation unit, a fusion and calculation rule library, an Internet speed monitoring unit, a usage monitoring unit, a controller, a display unit, a database, an input unit and a steady-state analysis unit. In the system provided by the invention, a virus attack attacking the system is analyzed and judged through the virus monitoring unit and the data parsing unit; then, real-time Internet speed of a security network is monitored and analyzed through the Internet speed monitoring unit, and a steady-state valve group of the Internet speed is obtained; meanwhile, usage rate of a CPU is monitored in real time through the monitoring unit; then, comprehensive analysis is executed in combination with latest virus attack frequency, the steady-state valve group and the real-time usage rate, thus, an evaluation signal is obtained, and different evaluation signals are transmitted to the database for storage.

Description

technical field [0001] The invention belongs to the field of network security and relates to security perception technology, in particular to an artificial intelligence-based network security situation awareness system for an industrial control system. Background technique [0002] The patent with the notification number CN105100013B discloses a method for sensing network security equipment, network security equipment and a controller, which solves the problem that the controller cannot perceive network security equipment in the prior art. The method includes: the network security device receives a Link Layer Discovery Protocol LLDP message; the network security device adds device information of the network security device to the LLDP message, and sends the device information added with the network security device send the LLDP message to the controller, so that the controller can perceive the network security device through the device information of the network security dev...

AI Technical Summary

Problems solved by technology

[0003] However, its perception and monitoring of network security only relies on the controller to perceive the network security device through the device information of the network security device in the LLDP message. , and related virus attacks are objectively and comprehensively reflected, and the obtained structure is not accurate enough; the overall system security situation is not well evaluated; in order to solve the above defects, a solution is now provided

Images