Data caching method and device for industrial control network, terminal equipment and medium

Abstract

The invention is applicable to the technical field of industrial control management, and particularly relates to a data caching method and device for an industrial control network, terminal equipmentand a medium. The method comprises the steps of obtaining first attack data of an industrial control network and attribute information of the first attack data; and obtaining candidate cache data of the first attack data according to the first attack data and the attribute information of the first attack data, and storing the candidate cache data of the first attack data into a preset cache library . By storing candidate cache data into a preset cache library, users conveniently call the data. Candidate cache data is directly extracted from a preset cache library in the subsequent access process. The attack data is prevented from being analyzed and processed again by subsequent access, so that the phenomenon of relatively high resource occupation of the terminal equipment due to multiple analysis and processing of the attack data is avoided, the response speed of the terminal equipment is increased, and the method is suitable for processing requirements of a large amount of attack data.

Description

technical field [0001] The application belongs to the technical field of industrial control management, and in particular relates to a data caching method, device, terminal equipment and medium of an industrial control network. Background technique [0002] With the rapid development of Internet information technology, industrial control systems have introduced a large number of Internet information technologies, making traditional information security risks spread to industrial control systems. In order to effectively realize the active security defense of the industrial control system, at present, the behavior motivation of the attacker is generally studied by capturing and analyzing the original data such as the attack traffic of the industrial control network, so that countermeasures can be effectively taken. After obtaining the above-mentioned original data, the original data is generally directly written into the database, for example, MySQL database, because there are...

AI Technical Summary

Problems solved by technology

[0003] The embodiment of the present application provides a data caching method, device, terminal equipment, and medium for an industrial control network, which can solve the problem of directly storing original data into a database in the prior art, resulting in low data storage efficiency, and the terminal equipment running the database High resource usage issues

Images