基于多核处理器的工业控制系统硬件防火墙研究  

Research on Multi-Core Processor Based Hardware Firewall for Industrial Control System

作　　者：俞海国[1] 马先[1] 徐有蕊 苏生平[1] 李楠芳[1] 尚西元[1] 马学智[1] 

机构地区：[1]国网青海省电力公司,青海西宁810000

出　　处：《电力信息与通信技术》2016年第8期42-45,共4页Electric Power Information and Communication Technology

摘　　要：工业控制系统防火墙需要对应用层传输的工业控制协议报文进行深度解析,提取传输的控制指令和数据内容,从而检测异常网络流量。模式匹配规则的增加和网络传输速度的提升对于检测能力的要求越来越高。文章提出一种基于多核处理器的工业控制系统硬件防火墙架构设计,优化对工业网络中异常流量行为的检测和策略处理。相比于传统的硬件架构,该架构具有灵活性和可扩展性,在处理能力上具备显著优势。To detect abnormal behavior from network traffics, deep packet inspection is used to extract control command and data in industrial control network firewall. The increase of detecting rules and transmitting speed brought high requirement of detection ability. A firewall architecture based on multiprocessor in industrial control system is proposed to enhance detection capability of abnormal behavior. Compared with traditional architectures, the architecture based on multiprocessor has stronger processing performance and expandability.

关 键 词：工业控制系统 硬件防火墙 多核处理器 流量监控 

分 类 号：TP319[自动化与计算机技术—计算机软件与理论]