Industrial automation control systems often use dedicated communication protocols,and their application scenarios are closely related to production processes.The currently widely used industrial control threat monitoring technology is based on pas-sive defense concepts,which cannot effectively identify intrusion threats targeting industrial infrastructure with complex technology and covert means.Based on the restoration of industrial related files transmitted in industrial networks,a soft PLC simulation plat-form application level monitoring and analysis,as well as key security feature tracing scheme,is proposed.This scheme can not only comprehensively cover multiple stages of industrial network threat models,but also more fully respond to the technical charac-teristics of industrial production scene intrusion and interference.It has become one of the effective ways to monitor and trace ad-vanced sustainability threats in industrial networks.
关键词
工业控制系统/高级可持续性威胁/soft-PLC/溯源
Key words
industrial control system/advanced persistent threat/soft-PLC/traceability