多协议的工业网络安全隔离设备的设计与实现

发布时间：2018-05-16 08:10

本文选题：工业安全 + 数据库同步　；参考：《北京邮电大学》2017年硕士论文

【摘要】：随着我国工业信息化的发展,工业现场的信息安全日益重要。信息化的管理系统在提高生产效率的同时,也给黑客等不法分子提供入侵网络的可乘之机。在电力,石油等关键工业领域,基于物理隔离的单向导入技术可以有效地保护工控网络的安全。论文以单向导入技术为基础,研究了单向隔离状态下如何实现Oracle数据库的同步以及Modbus协议的同步。通过分析关键技术,论文首先设计了隔离设备的基础架构,包括配置解析模块、初始化模块、生产者消费者模块、通信发送与接收模块以及数据编码解码模块。通过模块化的设计,使得系统在业务支持上具有很强的扩展性。基于基础功能模块,论文实现并验证了数据库同步以及Modbus协议的同步逻辑。在数据库同步方面,隔离系统通过配置文件读取同步表格,之后程序创建DML触发器记录SQL执行语句并保存在源数据库。生产者读取操作记录并调用单向光网卡发送数据,对端消费者程序执行语句实现同步。Modbus协议同步实现方面,基本流程与数据库同步相似。Modbus同步实现了 Modbus服务端和客户端程序。系统的Modbus模拟客户端程序读取受保护的Modbus服务器数据,解析处理后调用单向光网卡发送到系统的Modbus模拟服务器端。服务器端依照共享内存技术,在本端实现数据同步,之后向外网的Modbus读取请求提供同步后的正确应答数据。
[Abstract]:With the development of industrial informatization in China, the information security of the industrial site is becoming more and more important. The information management system, while improving the production efficiency, also provides the hackers and other illegal elements to provide the opportunity to invade the network. In the key industrial fields, such as electric power and oil, the unidirectional import technology based on physical isolation can effectively protect the industrial control. On the basis of unidirectional import technology, this paper studies how to synchronize Oracle database and synchronization of Modbus protocol under one-way isolation. By analyzing key technologies, the paper first designs the infrastructure of isolation equipment, including configuration parsing module, initialization module, producer consumer module, communication transmission. With the receiving module and the data encoding and decoding module. Through modular design, the system has a strong extensibility in the business support. Based on the basic function module, the paper realizes and validates the synchronization logic of the database and the Modbus protocol. In the database synchronization, the isolation system reads the synchronization form through the configuration file. After that, the program creates the DML trigger to record the SQL execution statement and save it in the source database. The producer reads the operation record and sends the data by calling the unidirectional optical network card. The synchronous implementation of the synchronous.Modbus protocol is realized by the execution statements of the end consumer program. The basic process and the database synchronize as.Modbus synchronizes the Modbus server and the guest. The Modbus simulation client program reads the protected Modbus server data, and then sends the one-way optical network card to the Modbus analog server side after parsing processing. The server side implements data synchronization at this end according to the shared memory technology, and then provides the correct response after the synchronization to the Modbus read request from the outer network. Data.

【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】