基于FreeBSD的工控协议防火墙技术的研究与实现

发布时间：2018-05-08 19:32

本文选题：工控协议 + FreeBSD　；参考：《北京邮电大学》2017年硕士论文

【摘要】：工业控制网络在日常的工业生产生活中发挥着重要作用,其安全性因此受到了极大地关注。伴随着网络技术的发展,工业控制网络大量使用工业以太网技术,这使其极容易受到木马、病毒、黑客的安全威胁。工业控制网络广泛地采用工业控制协议来进行通信,其中一些工业控制协议具有无认证、明文传输、防火墙不友好等缺陷。因此研究针对工控网络协议的防火墙技术,对提升工业控制网络的安全性具有实际应用价值。本文针对上述工控协议可能存在的缺陷,设计了基于FreeBSD的工控协议防火墙技术模型,并以Modbus及OPC协议为例实现了相应的内核模块。利用PacketFilter包过滤技术与Pfil数据包拦截框架实现了工控协议的深度解析与白名单过滤功能。本文主要实现了以下防火墙模块:1)拦截模块负责抓取数据包供其它模块分析操作,并对数据包进行最终处理。2)过滤模块针对防火墙的基础过滤功能,主要过滤符合配置规则的特定数据包。3)协议处理模块负责分析不同的工业控制协议,它可以动态地加载、卸载。它能够分析工控协议数据包并利用白名单机制过滤。4)配置模块负责防火墙的运行配置。5)日志模块负责记录针对防火墙系统的操作以及过滤日志。论文对防火墙的技术模型进行实验验证,证明系统具备设计的各种功能。本文设计的防火墙技术采用工控协议数据包深度解析及白名单过滤的方法提高了工控网络的安全性,克服了工控协议无认证、防火墙不友好等缺陷,具有实用性。
[Abstract]:Industrial control network plays an important role in daily industrial life, and its safety has been paid great attention to. With the development of network technology, industrial control network uses industrial Ethernet technology, which makes it vulnerable to the security threats of Trojan horses, viruses and hackers. Industrial control network widely uses industrial control protocol to communicate, some of which have the defects of no authentication, clear text transmission, unfriendly firewall and so on. Therefore, the study of firewall technology for industrial control network protocol has practical application value in improving the security of industrial control network. Aiming at the possible defects of the above industrial control protocols, this paper designs a firewall technology model based on FreeBSD, and takes Modbus and OPC protocols as examples to implement the corresponding kernel modules. The depth resolution and whitelist filtering function of industrial control protocol are realized by using PacketFilter packet filtering technology and Pfil packet interception framework. This paper mainly implements the following firewall module: 1) the interception module is responsible for fetching data packets for other modules to analyze and operate, and the packet final processing. 2) filtering module for firewall basic filtering function, The main filtering protocol processing module is responsible for analyzing different industrial control protocols, which can be loaded and unloaded dynamically. It can analyze data packets of industrial control protocol and use whitelist mechanism to filter. 4) configuration module is responsible for firewall running configuration. 5) log module is responsible for recording operation and filtering log for firewall system. The paper verifies the technical model of firewall and proves that the system has all kinds of functions. The firewall technology designed in this paper uses the methods of data packet depth analysis and whitelist filtering of industrial control protocol to improve the security of industrial control network, overcome the shortcomings of no authentication of industrial control protocol, unfriendly firewall and so on, and have practicability.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】