CN115484063A - A network security prevention and control method and system for industrial control systems - Google Patents

Abstract

The present invention relates to the technical field of network security prevention and control, and discloses a network security prevention and control method and system for industrial control systems, including: step S1: obtaining user login account information and historical behavior information; step S2: according to step S1 Determine the user’s level factor and the network security prevention and control level based on the information obtained in ; Step S3: After determining the user’s level factor and network security Levels prevent and control industrial control systems. This application determines the user's level coefficient and network security prevention and control level based on the user's login account information and historical behavior information, and then generates corresponding access rights through the user's level coefficient. At the same time, different User security prevention and control levels are also different, and network security prevention and control methods are also different. This application can not only improve the security of industrial control systems, but also ensure the stability of users' normal operations.

Description

A network security prevention and control method and system for industrial control systems

technical field

The invention relates to the technical field of network security prevention and control, in particular to a network security prevention and control method and system for industrial control systems.

Background technique

Industrial control system (referred to as industrial control system) is a system composed of various automation components and control components for real-time data collection. Its core components include data acquisition and monitoring system, distributed control system, programmable controller, remote terminal, human-computer interaction interface equipment, and interface technology to ensure the communication of each component. However, with the integration of industrialization and informatization, the network security of industrial control systems has become increasingly prominent. Once a security breach occurs, the industrial control system will be attacked by others, and the important data in the industrial control system will be stolen. , especially, the emergence of network security problems will cause immeasurable losses to industrial control systems.

In the prior art, the network security prevention and control method has the problem that it is difficult to adjust the network security prevention and control level according to the actual situation of the current user, resulting in insufficient security.

Therefore, how to provide a method that can effectively prevent and control the network security of the industrial control system is a technical problem to be solved at present.

Contents of the invention

Embodiments of the present invention provide a network security prevention and control method and system for industrial control systems to solve the problem that in the prior art, different security prevention and control levels cannot be formulated according to different users, and the network security prevention and control effect cannot be guaranteed. And the technical problems of industrial control system security cannot be guaranteed.

In order to achieve the above object, the present invention provides a network security prevention and control method for an industrial control system, the method comprising:

Step S1: Obtain the user's login account information and historical behavior information;

Step S2: According to the information obtained in the step S1, determine the level factor of the user and the network security prevention and control level of the industrial control system;

Step S3: After determining the level factor of the user and the network security prevention and control level of the industrial control system, generate corresponding access rights according to the level factor of the user, and generate corresponding access rights according to the network security prevention and control level of the industrial control system level to prevent and control the industrial control system;

In the step S1, the user's login account information includes the registration days A of the user's login account and the historical login times B of the user's login account; the historical behavior information includes the user's historical dangerous operation times C and the user's historical risk The total operation time D;

In the step S2, when determining the user's level coefficient and the network security prevention and control level of the industrial control system, the user's level coefficient is determined according to the registration days A of the user's login account, and according to the user's login account The number of historical login times B to correct the user's level coefficient; when determining the network security prevention and control level, determine the network security prevention and control level of the industrial control system according to the user's historical dangerous operation times C, and according to the Correct the network security prevention and control level of the industrial control system based on the total duration D of historical dangerous operations of the user.

Preferably, when determining the user's level coefficient according to the registration days A of the user's login account, specifically:

The registration days matrix A0 of the preset user login account, set A0 (A1, A2, A3, A4), where A1 is the first preset registration days, A2 is the second preset registration days, and A3 is the third preset Registration days, A4 is the fourth preset registration days, and A1<A2<A3<A4;

Preset the user's level coefficient matrix E, set E (E1, E2, E3, E4, E5), where E1 is the first preset level coefficient, E2 is the second preset level coefficient, and E3 is the third preset Grade coefficient, E4 is the fourth preset grade coefficient, E5 is the fifth preset grade coefficient, and E1<E2<E3<E4<E5;

According to the relationship between the registration days A of the user login account and the registration days of each preset user login account, the level coefficient of the user is set:

When A<A1, select the first preset level coefficient E1 as the user's level coefficient;

When A1≤A<A2, selecting the second preset level factor E2 as the level factor of the user;

When A2≤A<A3, selecting the third preset level coefficient E3 as the user's level coefficient;

When A3≤A<A4, selecting the fourth preset level coefficient E4 as the user's level coefficient;

When A≧A4, the fifth preset level coefficient E5 is selected as the user's level coefficient.

Preferably, when correcting the user's level coefficient according to the historical login times B of the user's login account, specifically:

The historical login times matrix F0 of the preset user login account, set F0 (F1, F2, F3, F4), where F1 is the first preset historical login times, F2 is the second preset historical login times, and F3 is the second Three preset historical login times, F4 is the fourth preset historical login times, and F1<F2<F3<F4;

Preset the user’s level coefficient correction coefficient matrix h, set h (h1, h2, h3, h4, h5), where h1 is the first preset level coefficient correction coefficient, h2 is the second preset level coefficient correction coefficient, h3 is the third preset level coefficient correction coefficient, h4 is the fourth preset level coefficient correction coefficient, h5 is the fifth preset level coefficient correction coefficient, and 0.8<h1<h2<h3<h4<h5<1.2;

When the level coefficient of the user is set as the i-th preset level coefficient Ei, i=1, 2, 3, 4, 5, according to the historical login times B of the user login account and the login times of each preset user The relationship between the historical login times of the accounts is used to modify the user's level coefficient:

When B<F1, select the first preset level coefficient correction coefficient h1 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h1;

When F1≤B<F2, select the second preset level coefficient correction factor h2 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h2;

When F2≤B<F3, select the third preset level coefficient correction factor h3 to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h3;

When F3≤B<F4, select the fourth preset level coefficient correction factor h4 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h4;

When B≥F4, the fifth preset level coefficient modification coefficient h5 is selected to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h5.

Preferably, when determining the network security prevention and control level of the industrial control system according to the historical number of dangerous operations C of the user, specifically:

Preset the user's historical dangerous operation times matrix G0, set G0 (G1, G2, G3, G4), where G1 is the first preset historical dangerous operation times, G2 is the second preset historical dangerous operation times, and G3 is The third preset historical number of dangerous operations, G4 is the fourth preset historical number of dangerous operations, and G1<G2<G3<G4;

Preset the network security prevention and control level matrix K of the industrial control system, set K (K1, K2, K3, K4, K5), where K1 is the first preset network security prevention and control level, and K2 is the second preset network Security prevention and control level, K3 is the third preset network security prevention and control level, K4 is the fourth preset network security prevention and control level, K5 is the fifth preset network security prevention and control level, and K1<K2<K3<K4< K5;

The network security prevention and control level of the industrial control system is set according to the relationship between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user:

When C<G1, select the first preset network security prevention and control level K1 as the network security prevention and control level of the industrial control system;

When G1≤C<G2, select the second preset network security prevention and control level K2 as the network security prevention and control level of the industrial control system;

When G2≤C<G3, select the third preset network security prevention and control level K3 as the network security prevention and control level of the industrial control system;

When G3≤C<G4, select the fourth preset network security prevention and control level K4 as the network security prevention and control level of the industrial control system;

When C≥G4, the fifth preset network security prevention and control level K5 is selected as the network security prevention and control level of the industrial control system.

Preferably, when modifying the network security prevention and control level of the industrial control system according to the total duration D of historical dangerous operations of the user, it is specifically:

Preset the user’s historical dangerous operation total duration matrix M0, set M0 (M1, M2, M3, M4), where M1 is the total duration of the first preset historical dangerous operation, and M2 is the total duration of the second preset historical dangerous operation , M3 is the total duration of the third preset historical dangerous operation, M4 is the total duration of the fourth preset historical dangerous operation, and M1<M2<M3<M4;

Preset the network security prevention and control level correction coefficient matrix n of the industrial control system, set n (n1, n2, n3, n4, n5), where n1 is the first preset network security prevention and control level correction coefficient, n2 is the second The second preset network security prevention and control level correction coefficient, n3 is the third preset network security prevention and control level correction coefficient, n4 is the fourth preset network security prevention and control level correction coefficient, n5 is the fifth preset network security prevention and control level Correction coefficient, and 0.8<n1<n2<n3<n4<n5<1.2;

When the network security prevention and control level of the industrial control system is set as the i-th preset network security prevention and control level Ki, i=1, 2, 3, 4, 5, according to the total number of historical dangerous operations of the user The relationship between the duration D and the total duration of historical dangerous operations of each preset user is used to modify the network security prevention and control level of the industrial control system:

When D<M1, the first preset network security prevention and control level correction coefficient n1 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n1;

When M1≤D<M2, select the second preset network security prevention and control level correction coefficient n2 to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control of the industrial control system after correction The level is Ki*n2;

When M2≤D<M3, select the third preset network security prevention and control level correction coefficient n3 to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n3;

When M3≤D<M4, select the correction coefficient n4 of the fourth preset network security prevention and control level to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n4;

When D≥M4, the fifth preset network security prevention and control level correction coefficient n5 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n5.

In order to achieve the above object, the present invention provides a network security prevention and control system for industrial control systems, the system comprising:

The acquisition module is used to acquire the user's login account information and historical behavior information;

A determination module, configured to determine the user's level coefficient and the network security prevention and control level of the industrial control system according to the information obtained in the acquisition module;

A control module, configured to generate corresponding access rights according to the user's level coefficient after determining the user's level coefficient and the network security prevention and control level of the industrial control system, and according to the network security level of the industrial control system Prevention and control level to prevent and control the industrial control system;

In the acquisition module, the user's login account information includes the registration days A of the user's login account and the historical login times B of the user's login account; the historical behavior information includes the user's historical dangerous operation times C and the user's historical dangerous The total operation time D;

In the determination module, when determining the user's level coefficient and the network security prevention and control level of the industrial control system, the user's level coefficient is determined according to the registration days A of the user's login account, and the user's level coefficient is determined according to the user's login account The number of historical login times B to correct the user's level coefficient; when determining the network security prevention and control level, determine the network security prevention and control level of the industrial control system according to the user's historical dangerous operation times C, and according to the Correct the network security prevention and control level of the industrial control system based on the total duration D of historical dangerous operations of the user.

Preferably, in the determination module, when determining the user's level coefficient according to the registration days A of the user's login account, specifically:

The determination module is used to preset the registration days matrix A0 of the user login account, and set A0 (A1, A2, A3, A4), where A1 is the first preset registration days, A2 is the second preset registration days, A3 is the third preset registration days, A4 is the fourth preset registration days, and A1<A2<A3<A4;

The determination module is used to preset the user's level coefficient matrix E, and set E (E1, E2, E3, E4, E5), where E1 is the first preset level coefficient, E2 is the second preset level coefficient, E3 is the coefficient of the third preset level, E4 is the coefficient of the fourth preset level, E5 is the coefficient of the fifth preset level, and E1<E2<E3<E4<E5;

The determination module is also used to set the level coefficient of the user according to the relationship between the registration days A of the user login account and the registration days of each preset user login account:

When A<A1, select the first preset level coefficient E1 as the user's level coefficient;

When A1≤A<A2, selecting the second preset level factor E2 as the level factor of the user;

When A2≤A<A3, selecting the third preset level coefficient E3 as the user's level coefficient;

When A3≤A<A4, selecting the fourth preset level coefficient E4 as the user's level coefficient;

When A≧A4, the fifth preset level coefficient E5 is selected as the user's level coefficient.

Preferably, in the determination module, when correcting the user's level coefficient according to the historical login times B of the user's login account, specifically:

The determination module is used to preset the historical login times matrix F0 of the user login account, and set F0 (F1, F2, F3, F4), wherein, F1 is the first preset historical login times, and F2 is the second preset history Login times, F3 is the third preset historical login times, F4 is the fourth preset historical login times, and F1<F2<F3<F4;

The determination module is used to preset the level coefficient correction coefficient matrix h of the user, and set h (h1, h2, h3, h4, h5), where h1 is the first preset level coefficient correction coefficient, h2 is the second preset Set level coefficient correction coefficient, h3 is the third preset level coefficient correction coefficient, h4 is the fourth preset level coefficient correction coefficient, h5 is the fifth preset level coefficient correction coefficient, and 0.8<h1<h2<h3<h4< h5<1.2;

The determination module is also used to set the user's level coefficient as the i-th preset level coefficient Ei, i=1, 2, 3, 4, 5, according to the historical login history of the user's login account The relationship between the number of times B and the historical login times of each preset user login account is to modify the level coefficient of the user:

When B<F1, select the first preset level coefficient correction coefficient h1 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h1;

When F1≤B<F2, select the second preset level coefficient correction factor h2 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h2;

When F2≤B<F3, select the third preset level coefficient correction factor h3 to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h3;

When F3≤B<F4, select the fourth preset level coefficient correction factor h4 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h4;

When B≥F4, the fifth preset level coefficient modification coefficient h5 is selected to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h5.

Preferably, in the determining module, when determining the network security prevention and control level of the industrial control system according to the historical number of dangerous operations C of the user, specifically:

The determination module is used to preset the user's historical dangerous operation times matrix G0, and set G0 (G1, G2, G3, G4), wherein G1 is the first preset historical dangerous operation times, and G2 is the second preset historical The number of dangerous operations, G3 is the third preset historical number of dangerous operations, G4 is the fourth preset historical number of dangerous operations, and G1<G2<G3<G4;

The determination module is used to preset the network security prevention and control level matrix K of the industrial control system, and set K (K1, K2, K3, K4, K5), where K1 is the first preset network security prevention and control level, and K2 is the second preset network security prevention and control level, K3 is the third preset network security prevention and control level, K4 is the fourth preset network security prevention and control level, K5 is the fifth preset network security prevention and control level, and K1< K2<K3<K4<K5;

The determination module is also used to set the network security prevention and control level of the industrial control system according to the relationship between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user:

When C<G1, select the first preset network security prevention and control level K1 as the network security prevention and control level of the industrial control system;

When G1≤C<G2, select the second preset network security prevention and control level K2 as the network security prevention and control level of the industrial control system;

When G2≤C<G3, select the third preset network security prevention and control level K3 as the network security prevention and control level of the industrial control system;

When G3≤C<G4, select the fourth preset network security prevention and control level K4 as the network security prevention and control level of the industrial control system;

When C≥G4, the fifth preset network security prevention and control level K5 is selected as the network security prevention and control level of the industrial control system.

Preferably, in the determining module, when correcting the network security prevention and control level of the industrial control system according to the total duration D of historical dangerous operations of the user, specifically:

The determination module is used to preset the user's historical dangerous operation total duration matrix M0, and set M0 (M1, M2, M3, M4), where M1 is the first preset historical total duration of dangerous operations, and M2 is the second preset Set the total duration of historical dangerous operations, M3 is the total duration of the third preset historical dangerous operations, M4 is the total duration of the fourth preset historical dangerous operations, and M1<M2<M3<M4;

The determination module is used to preset the network security prevention and control level correction coefficient matrix n of the industrial control system, and set n (n1, n2, n3, n4, n5), where n1 is the first preset network security prevention and control level The correction coefficient, n2 is the correction coefficient of the second preset network security prevention and control level, n3 is the correction coefficient of the third preset network security prevention and control level, n4 is the correction coefficient of the fourth preset network security prevention and control level, and n5 is the fifth preset network security prevention and control level correction coefficient. Set the network security prevention and control level correction coefficient, and 0.8<n1<n2<n3<n4<n5<1.2;

The determination module is also used to set the network security prevention and control level of the industrial control system as the i-th preset network security prevention and control level Ki, i=1, 2, 3, 4, 5, according to The relationship between the total historical dangerous operation duration D of the user and the total historical dangerous operation duration of each preset user corrects the network security prevention and control level of the industrial control system:

When D<M1, the first preset network security prevention and control level correction coefficient n1 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n1;

When M1≤D<M2, select the second preset network security prevention and control level correction coefficient n2 to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control of the industrial control system after correction The level is Ki*n2;

When M2≤D<M3, select the third preset network security prevention and control level correction coefficient n3 to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n3;

When M3≤D<M4, select the correction coefficient n4 of the fourth preset network security prevention and control level to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n4;

When D≥M4, the fifth preset network security prevention and control level correction coefficient n5 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n5.

The present invention provides a network security prevention and control method and system for industrial control systems. Compared with the prior art, it has the following beneficial effects:

This application includes: Step S1: Obtain the user's login account information and historical behavior information; Step S2: Determine the user's level coefficient and network security prevention and control level according to the information obtained in Step S1; Step S3: After determining the user's level coefficient After the network security prevention and control level, the corresponding access authority is generated according to the user's level coefficient, and the industrial control system is prevented and controlled according to the network security prevention and control level. This application determines the user's login account information and historical behavior information. The level coefficient and network security prevention and control level, and then generate the corresponding access rights through the user level coefficient. At the same time, different user security prevention and control levels are also different, and the network security prevention and control methods are also different. This application is improving the security of industrial control systems. At the same time, it can also guarantee the stability of the user's normal operation.

Description of drawings

Fig. 1 shows a schematic flow diagram of a network security prevention and control method for an industrial control system in an embodiment of the present invention;

Fig. 2 shows a schematic structural diagram of a network security prevention and control system for an industrial control system in an embodiment of the present invention.

detailed description

The specific implementation manners of the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. The following examples are used to illustrate the present invention, but are not intended to limit the scope of the present invention.

In the description of this application, it is to be understood that the terms "center", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", The orientations or positional relationships indicated by "top", "bottom", "inner", "outer", etc. are based on the orientations or positional relationships shown in the drawings, and are only for the convenience of describing the application and simplifying the description, rather than indicating or implying References to devices or elements must have a particular orientation, be constructed, and operate in a particular orientation and therefore should not be construed as limiting the application.

The terms "first" and "second" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance or implicitly specifying the quantity of indicated technical features. Thus, a feature defined as "first" and "second" may explicitly or implicitly include one or more of these features. In the description of the present application, unless otherwise specified, "plurality" means two or more.

In the description of this application, it should be noted that unless otherwise specified and limited, the terms "installation", "connection", and "connection" should be understood in a broad sense, for example, it can be a fixed connection or a detachable connection. Connection, or integral connection; it can be mechanical connection or electrical connection; it can be direct connection or indirect connection through an intermediary, and it can be the internal communication of two components. Those of ordinary skill in the art can understand the specific meanings of the above terms in this application in specific situations.

The following is a description of preferred embodiments of the present invention in conjunction with the accompanying drawings.

As shown in Figure 1, the embodiment of the present invention discloses a network security prevention and control method for an industrial control system, the method comprising:

Step S1: Obtain the user's login account information and historical behavior information;

Step S2: According to the information obtained in the step S1, determine the level factor of the user and the network security prevention and control level of the industrial control system;

Step S3: After determining the level factor of the user and the network security prevention and control level of the industrial control system, generate corresponding access rights according to the level factor of the user, and generate corresponding access rights according to the network security prevention and control level of the industrial control system level to prevent and control the industrial control system;

In the step S1, the user's login account information includes the registration days A of the user's login account and the historical login times B of the user's login account; the historical behavior information includes the user's historical dangerous operation times C and the user's historical risk The total operation time D;

In the step S2, when determining the user's level coefficient and the network security prevention and control level of the industrial control system, the user's level coefficient is determined according to the registration days A of the user's login account, and according to the user's login account The number of historical login times B to correct the user's level coefficient; when determining the network security prevention and control level, determine the network security prevention and control level of the industrial control system according to the user's historical dangerous operation times C, and according to the Correct the network security prevention and control level of the industrial control system based on the total duration D of historical dangerous operations of the user.

It should be noted that this application includes: Step S1: Obtain the user's login account information and historical behavior information; Step S2: Determine the user's level coefficient and network security prevention and control level according to the information obtained in Step S1; Step S3: In After determining the user's level coefficient and network security prevention and control level, generate corresponding access rights according to the user's level coefficient, and prevent and control the industrial control system according to the network security prevention and control level. This application is based on the user's login account information and historical behavior information to determine the user's level coefficient and network security prevention and control level, and then generate corresponding access rights through the user's level coefficient. While improving the security of the industrial control system, it can also guarantee the stability of the normal operation of the user.

It should also be noted that when the user needs to access the website of the industrial control system, the user needs to enter the user's login account number and login password. The number of historical logins between. At the same time, the number of historical dangerous operations and the total duration of historical dangerous operations of the current user from the registration of the login account to the current login are obtained. Among them, when the user actually visits, such as when the user visits a webpage, he clicks on a website with unknown security Links, such as uploading illegal files during actual access, these actions are judged as dangerous operations, and counted, and record the duration of this dangerous operation from the beginning to the end, that is, from when the user clicks the link to when the firewall detects the virus and the killing time, or the time from when the user clicks on the link to when the firewall automatically stops accessing the link, sum the durations corresponding to the times of all dangerous operations to obtain the total duration of historical dangerous operations. It should be understood that the above is shown by example, not Be specific.

In some embodiments of the present application, when determining the user's level coefficient according to the registration days A of the user's login account, specifically:

The registration days matrix A0 of the preset user login account, set A0 (A1, A2, A3, A4), where A1 is the first preset registration days, A2 is the second preset registration days, and A3 is the third preset Registration days, A4 is the fourth preset registration days, and A1<A2<A3<A4;

Preset the user's level coefficient matrix E, set E (E1, E2, E3, E4, E5), where E1 is the first preset level coefficient, E2 is the second preset level coefficient, and E3 is the third preset Grade coefficient, E4 is the fourth preset grade coefficient, E5 is the fifth preset grade coefficient, and E1<E2<E3<E4<E5;

According to the relationship between the registration days A of the user login account and the registration days of each preset user login account, the level coefficient of the user is set:

When A<A1, select the first preset level coefficient E1 as the user's level coefficient;

When A1≤A<A2, selecting the second preset level factor E2 as the level factor of the user;

When A2≤A<A3, selecting the third preset level coefficient E3 as the user's level coefficient;

When A3≤A<A4, selecting the fourth preset level coefficient E4 as the user's level coefficient;

When A≧A4, the fifth preset level coefficient E5 is selected as the user's level coefficient.

It should be noted that when the user's registration days are longer, the corresponding level coefficient is higher. Conversely, when the registration days are shorter, the corresponding level coefficient is lower.

Among them, the number of registration days of the user's login account can be determined according to the user's login account, the user's level coefficient matrix is set according to actual needs, and the user's level coefficient matrix is also set according to actual needs, but through the user The number of days of registration cannot directly determine the user's specific level coefficient, so this application sets the user's level coefficient according to the relationship between the number of registration days A of the user's login account and the number of registration days of each preset user login account, which can accurately Determines the level factor for the current user.

In some embodiments of the present application, when correcting the user's level coefficient according to the historical login times B of the user's login account, specifically:

The historical login times matrix F0 of the preset user login account, set F0 (F1, F2, F3, F4), where F1 is the first preset historical login times, F2 is the second preset historical login times, and F3 is the second Three preset historical login times, F4 is the fourth preset historical login times, and F1<F2<F3<F4;

Preset the user’s level coefficient correction coefficient matrix h, set h (h1, h2, h3, h4, h5), where h1 is the first preset level coefficient correction coefficient, h2 is the second preset level coefficient correction coefficient, h3 is the third preset level coefficient correction coefficient, h4 is the fourth preset level coefficient correction coefficient, h5 is the fifth preset level coefficient correction coefficient, and 0.8<h1<h2<h3<h4<h5<1.2;

When the level coefficient of the user is set as the i-th preset level coefficient Ei, i=1, 2, 3, 4, 5, according to the historical login times B of the user login account and the login times of each preset user The relationship between the historical login times of the accounts is used to modify the user's level coefficient:

When B<F1, select the first preset level coefficient correction coefficient h1 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h1;

When F1≤B<F2, select the second preset level coefficient correction factor h2 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h2;

When F2≤B<F3, select the third preset level coefficient correction factor h3 to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h3;

When F3≤B<F4, select the fourth preset level coefficient correction factor h4 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h4;

When B≥F4, the fifth preset level coefficient modification coefficient h5 is selected to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h5.

It should be noted that although the longer the user's registration period, the higher the user's level coefficient, but in actual situations, if the user's registration period is very long, but the number of times the user uses the login account to log in to the industrial control system is very small, at this time , then the user’s level coefficient cannot be determined directly based on the number of days of registration of the login account. It is necessary to correct and adjust the user’s level coefficient according to the historical login times of the user’s login account. This application is based on the historical login times B of the user’s login account and each preset Setting the relationship between the historical login times of the user's login account to modify the user's level coefficient can further improve the accuracy of determining the user's level coefficient.

It should also be noted that after the user's level coefficient is determined, corresponding access rights are generated according to the user's level coefficient. The higher the user's level coefficient, the greater the user's access rights. The access rights can be: only allow Access to preset webpages or all webpages can be accessed, or all webpages can be accessed while downloading files, etc., are not specifically limited here, and can be set according to actual needs.

In some embodiments of the present application, when determining the network security prevention and control level of the industrial control system according to the historical number of dangerous operations C of the user, specifically:

Preset the user's historical dangerous operation times matrix G0, set G0 (G1, G2, G3, G4), where G1 is the first preset historical dangerous operation times, G2 is the second preset historical dangerous operation times, and G3 is The third preset historical number of dangerous operations, G4 is the fourth preset historical number of dangerous operations, and G1<G2<G3<G4;

Preset the network security prevention and control level matrix K of the industrial control system, set K (K1, K2, K3, K4, K5), where K1 is the first preset network security prevention and control level, and K2 is the second preset network Security prevention and control level, K3 is the third preset network security prevention and control level, K4 is the fourth preset network security prevention and control level, K5 is the fifth preset network security prevention and control level, and K1<K2<K3<K4< K5;

The network security prevention and control level of the industrial control system is set according to the relationship between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user:

When C<G1, select the first preset network security prevention and control level K1 as the network security prevention and control level of the industrial control system;

When G1≤C<G2, select the second preset network security prevention and control level K2 as the network security prevention and control level of the industrial control system;

When G2≤C<G3, select the third preset network security prevention and control level K3 as the network security prevention and control level of the industrial control system;

When G3≤C<G4, select the fourth preset network security prevention and control level K4 as the network security prevention and control level of the industrial control system;

When C≥G4, the fifth preset network security prevention and control level K5 is selected as the network security prevention and control level of the industrial control system.

It should be noted that when the number of dangerous operations performed by users increases, the network security prevention and control level of the industrial control system needs to be improved. Dangerous operation behavior, under this level of security prevention and control, the user will be less dangerously lured. In particular, when the current user accesses, if the user performs too many dangerous operations, the user's access will be suspended. This application sets the network security prevention and control level of the industrial control system according to the relationship between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user, which can reduce the number of dangerous operations of the user and effectively improve the Security of industrial control systems.

In some embodiments of the present application, when modifying the network security prevention and control level of the industrial control system according to the total duration D of historical dangerous operations of the user, it is specifically:

Preset the user’s historical dangerous operation total duration matrix M0, set M0 (M1, M2, M3, M4), where M1 is the total duration of the first preset historical dangerous operation, and M2 is the total duration of the second preset historical dangerous operation , M3 is the total duration of the third preset historical dangerous operation, M4 is the total duration of the fourth preset historical dangerous operation, and M1<M2<M3<M4;

Preset the network security prevention and control level correction coefficient matrix n of the industrial control system, set n (n1, n2, n3, n4, n5), where n1 is the first preset network security prevention and control level correction coefficient, n2 is the second The second preset network security prevention and control level correction coefficient, n3 is the third preset network security prevention and control level correction coefficient, n4 is the fourth preset network security prevention and control level correction coefficient, n5 is the fifth preset network security prevention and control level Correction coefficient, and 0.8<n1<n2<n3<n4<n5<1.2;

When the network security prevention and control level of the industrial control system is set as the i-th preset network security prevention and control level Ki, i=1, 2, 3, 4, 5, according to the total number of historical dangerous operations of the user The relationship between the duration D and the total duration of historical dangerous operations of each preset user is used to modify the network security prevention and control level of the industrial control system:

When D<M1, the first preset network security prevention and control level correction coefficient n1 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n1;

When M1≤D<M2, select the second preset network security prevention and control level correction coefficient n2 to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control of the industrial control system after correction The level is Ki*n2;

When M2≤D<M3, select the third preset network security prevention and control level correction coefficient n3 to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n3;

When M3≤D<M4, select the correction coefficient n4 of the fourth preset network security prevention and control level to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n4;

When D≥M4, the fifth preset network security prevention and control level correction coefficient n5 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n5.

It should be noted that when a user performs a dangerous operation, the firewall will detect and kill the virus, or the firewall will directly and automatically stop accessing the link, which can avoid further occurrence of dangerous temptations. If the firewall finds a virus and kills it or directly The shorter the time it takes to stop access, the less dangerous the user is doing. If the firewall finds a virus and kills it, or the longer it takes to stop accessing, it means the user is more dangerous. Therefore, this application is approved According to the relationship between the total historical dangerous operation duration D of the user and the total historical dangerous operation duration of each preset user, the network security prevention and control level of the industrial control system is corrected, which can ensure the stability of the normal operation of the user and further guarantee security of industrial control systems.

It should also be noted that when users visit the relevant websites of the industrial control system, they can only do so under the corresponding access authority. For security prevention and control of this visit, the network security prevention and control methods corresponding to the network security prevention and control level are also different. For example, when the network security prevention and control level is level 1, the network security prevention and control method at this time can be: click For unknown links, wait for the page, and display after the firewall judges the security. For example, when the network security prevention and control level is high, the network security prevention and control method at this time can be: click on the link with unknown security or upload a file At the same time, identity authentication and relevant security verification are performed. It should be understood that, the foregoing is shown by way of example and not specifically limited, and the network security prevention and control level and the corresponding network security prevention and control method may be set according to actual requirements. By generating different security prevention and control levels for different users and adopting different security prevention and control methods, it can not only ensure the normal operation of users, but also ensure the security of industrial control systems and users.

As shown in Figure 2, an embodiment of the present invention discloses a network security prevention and control system for an industrial control system, the system comprising:

The acquisition module is used to acquire the user's login account information and historical behavior information;

A determination module, configured to determine the user's level coefficient and the network security prevention and control level of the industrial control system according to the information obtained in the acquisition module;

A control module, configured to generate corresponding access rights according to the user's level coefficient after determining the user's level coefficient and the network security prevention and control level of the industrial control system, and according to the network security level of the industrial control system Prevention and control level to prevent and control the industrial control system;

In the acquisition module, the user's login account information includes the registration days A of the user's login account and the historical login times B of the user's login account; the historical behavior information includes the user's historical dangerous operation times C and the user's historical dangerous The total operation time D;

In the determination module, when determining the user's level coefficient and the network security prevention and control level of the industrial control system, the user's level coefficient is determined according to the registration days A of the user's login account, and the user's level coefficient is determined according to the user's login account The number of historical login times B to correct the user's level coefficient; when determining the network security prevention and control level, determine the network security prevention and control level of the industrial control system according to the user's historical dangerous operation times C, and according to the Correct the network security prevention and control level of the industrial control system based on the total duration D of historical dangerous operations of the user.

It should be noted that this application includes: acquisition module: to obtain the user's login account information and historical behavior information; determination module: to determine the user's level coefficient and network security prevention and control level according to the information obtained in the acquisition module; control module: in After determining the user's level coefficient and network security prevention and control level, generate corresponding access rights according to the user's level coefficient, and prevent and control the industrial control system according to the network security prevention and control level. This application is based on the user's login account information and historical behavior information to determine the user's level coefficient and network security prevention and control level, and then generate corresponding access rights through the user's level coefficient. While improving the security of the industrial control system, it can also guarantee the stability of the normal operation of the user.

It should also be noted that when the user needs to access the website of the industrial control system, the user needs to enter the user's login account number and login password. The number of historical logins between. At the same time, the number of historical dangerous operations and the total duration of historical dangerous operations of the current user from the registration of the login account to the current login are obtained. Among them, when the user actually visits, such as when the user visits a webpage, he clicks on a website with unknown security Links, such as uploading illegal files during actual access, these actions are judged as dangerous operations, and counted, and record the duration of this dangerous operation from the beginning to the end, that is, from when the user clicks the link to when the firewall detects the virus and the killing time, or the time from when the user clicks on the link to when the firewall automatically stops accessing the link, sum the durations corresponding to the times of all dangerous operations to obtain the total duration of historical dangerous operations. It should be understood that the above is shown by example, not Be specific.

In some embodiments of the present application, in the determining module, when determining the user's level coefficient according to the number of days A of registration of the user's login account, specifically:

The determination module is used to preset the registration days matrix A0 of the user login account, and set A0 (A1, A2, A3, A4), where A1 is the first preset registration days, A2 is the second preset registration days, A3 is the third preset registration days, A4 is the fourth preset registration days, and A1<A2<A3<A4;

The determination module is used to preset the user's level coefficient matrix E, and set E (E1, E2, E3, E4, E5), where E1 is the first preset level coefficient, E2 is the second preset level coefficient, E3 is the coefficient of the third preset level, E4 is the coefficient of the fourth preset level, E5 is the coefficient of the fifth preset level, and E1<E2<E3<E4<E5;

The determination module is also used to set the level coefficient of the user according to the relationship between the registration days A of the user login account and the registration days of each preset user login account:

When A<A1, select the first preset level coefficient E1 as the user's level coefficient;

When A1≤A<A2, selecting the second preset level factor E2 as the level factor of the user;

When A2≤A<A3, selecting the third preset level coefficient E3 as the user's level coefficient;

When A3≤A<A4, selecting the fourth preset level coefficient E4 as the user's level coefficient;

When A≧A4, the fifth preset level coefficient E5 is selected as the user's level coefficient.

It should be noted that the longer the user's registration days, the higher the corresponding level coefficient. On the contrary, the shorter the registration days, the lower the corresponding level coefficient. Among them, the registration days of the user's login account It can be determined according to the user's login account. The user's level coefficient matrix is set according to actual needs, and the user's level coefficient matrix is also set according to actual needs, but the user's registration days cannot be directly judged. Therefore, this application can accurately determine the current user's level coefficient by setting the user's level coefficient according to the relationship between the registration days A of the user's login account and the registration days of each preset user's login account.

In some embodiments of the present application, in the determining module, when correcting the user's level coefficient according to the historical login times B of the user's login account, specifically:

The determination module is used to preset the historical login times matrix F0 of the user login account, and set F0 (F1, F2, F3, F4), wherein, F1 is the first preset historical login times, and F2 is the second preset history Login times, F3 is the third preset historical login times, F4 is the fourth preset historical login times, and F1<F2<F3<F4;

The determination module is used to preset the level coefficient correction coefficient matrix h of the user, and set h (h1, h2, h3, h4, h5), where h1 is the first preset level coefficient correction coefficient, h2 is the second preset Set level coefficient correction coefficient, h3 is the third preset level coefficient correction coefficient, h4 is the fourth preset level coefficient correction coefficient, h5 is the fifth preset level coefficient correction coefficient, and 0.8<h1<h2<h3<h4< h5<1.2;

The determination module is also used to set the user's level coefficient as the i-th preset level coefficient Ei, i=1, 2, 3, 4, 5, according to the historical login history of the user's login account The relationship between the number of times B and the historical login times of each preset user login account is to modify the level coefficient of the user:

When B<F1, select the first preset level coefficient correction coefficient h1 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h1;

When F1≤B<F2, select the second preset level coefficient correction factor h2 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h2;

When F2≤B<F3, select the third preset level coefficient correction factor h3 to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h3;

When F3≤B<F4, select the fourth preset level coefficient correction factor h4 to correct the i-th preset level coefficient Ei, and the user's level coefficient after correction is Ei*h4;

When B≥F4, the fifth preset level coefficient modification coefficient h5 is selected to correct the ith preset level coefficient Ei, and the user's level coefficient after correction is Ei*h5.

It should be noted that although the longer the user's registration period, the higher the user's level coefficient, but in actual situations, if the user's registration period is very long, but the number of times the user uses the login account to log in to the industrial control system is very small, at this time , then the user’s level coefficient cannot be determined directly based on the number of days of registration of the login account. It is necessary to correct and adjust the user’s level coefficient according to the historical login times of the user’s login account. This application is based on the historical login times B of the user’s login account and each preset Setting the relationship between the historical login times of the user's login account to modify the user's level coefficient can further improve the accuracy of determining the user's level coefficient.

It should also be noted that after the user's level coefficient is determined, corresponding access rights are generated according to the user's level coefficient. The higher the user's level coefficient, the greater the user's access rights. The access rights can be: only allow Access to preset webpages or all webpages can be accessed, or all webpages can be accessed and files can be downloaded, etc., which are not specifically limited here, and can be set according to actual needs.

In some embodiments of the present application, in the determination module, when determining the network security prevention and control level of the industrial control system according to the historical number of dangerous operations C of the user, specifically:

The determination module is used to preset the user's historical dangerous operation times matrix G0, and set G0 (G1, G2, G3, G4), wherein G1 is the first preset historical dangerous operation times, and G2 is the second preset historical The number of dangerous operations, G3 is the third preset historical number of dangerous operations, G4 is the fourth preset historical number of dangerous operations, and G1<G2<G3<G4;

The determination module is used to preset the network security prevention and control level matrix K of the industrial control system, and set K (K1, K2, K3, K4, K5), where K1 is the first preset network security prevention and control level, and K2 is the second preset network security prevention and control level, K3 is the third preset network security prevention and control level, K4 is the fourth preset network security prevention and control level, K5 is the fifth preset network security prevention and control level, and K1< K2<K3<K4<K5;

The determination module is also used to set the network security prevention and control level of the industrial control system according to the relationship between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user:

When C<G1, select the first preset network security prevention and control level K1 as the network security prevention and control level of the industrial control system;

When G1≤C<G2, select the second preset network security prevention and control level K2 as the network security prevention and control level of the industrial control system;

When G2≤C<G3, select the third preset network security prevention and control level K3 as the network security prevention and control level of the industrial control system;

When G3≤C<G4, select the fourth preset network security prevention and control level K4 as the network security prevention and control level of the industrial control system;

When C≥G4, the fifth preset network security prevention and control level K5 is selected as the network security prevention and control level of the industrial control system.

It should be noted that when the number of dangerous operations performed by users increases, the network security prevention and control level of the industrial control system needs to be improved. Dangerous operation behavior, under this level of security prevention and control, the user will be less dangerously lured. In particular, when the current user accesses, if the user performs too many dangerous operations, the user's access will be suspended. This application sets the network security prevention and control level of the industrial control system according to the relationship between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user, which can reduce the number of dangerous operations of the user and effectively improve the Security of industrial control systems.

In some embodiments of the present application, in the determination module, when correcting the network security prevention and control level of the industrial control system according to the total duration D of the user's historical dangerous operations, specifically:

The determination module is used to preset the user's historical dangerous operation total duration matrix M0, and set M0 (M1, M2, M3, M4), where M1 is the first preset historical total duration of dangerous operations, and M2 is the second preset Set the total duration of historical dangerous operations, M3 is the total duration of the third preset historical dangerous operations, M4 is the total duration of the fourth preset historical dangerous operations, and M1<M2<M3<M4;

The determination module is used to preset the network security prevention and control level correction coefficient matrix n of the industrial control system, and set n (n1, n2, n3, n4, n5), where n1 is the first preset network security prevention and control level The correction coefficient, n2 is the correction coefficient of the second preset network security prevention and control level, n3 is the correction coefficient of the third preset network security prevention and control level, n4 is the correction coefficient of the fourth preset network security prevention and control level, and n5 is the fifth preset network security prevention and control level correction coefficient. Set the network security prevention and control level correction coefficient, and 0.8<n1<n2<n3<n4<n5<1.2;

The determination module is also used to set the network security prevention and control level of the industrial control system as the i-th preset network security prevention and control level Ki, i=1, 2, 3, 4, 5, according to The relationship between the total historical dangerous operation duration D of the user and the total historical dangerous operation duration of each preset user corrects the network security prevention and control level of the industrial control system:

When D<M1, the first preset network security prevention and control level correction coefficient n1 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n1;

When M1≤D<M2, select the second preset network security prevention and control level correction coefficient n2 to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control of the industrial control system after correction The level is Ki*n2;

When M2≤D<M3, select the third preset network security prevention and control level correction coefficient n3 to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n3;

When M3≤D<M4, select the correction coefficient n4 of the fourth preset network security prevention and control level to modify the i-th preset network security prevention and control level Ki, and correct the network security prevention and control of the industrial control system The grade is Ki*n4;

When D≥M4, the fifth preset network security prevention and control level correction coefficient n5 is selected to modify the i-th preset network security prevention and control level Ki, and the network security prevention and control level of the industrial control system after correction is Ki*n5.

It should be noted that when a user performs a dangerous operation, the firewall will detect and kill the virus, or the firewall will directly and automatically stop accessing the link, which can avoid further occurrence of dangerous temptations. If the firewall finds a virus and kills it or directly The shorter the time it takes to stop access, the less dangerous the user is doing. If the firewall finds a virus and kills it, or the longer it takes to stop accessing, it means the user is more dangerous. Therefore, this application is approved According to the relationship between the total historical dangerous operation duration D of the user and the total historical dangerous operation duration of each preset user, the network security prevention and control level of the industrial control system is corrected, which can ensure the stability of the normal operation of the user and further guarantee security of industrial control systems.

It should also be noted that when users visit the relevant websites of the industrial control system, they can only do so under the corresponding access authority. For security prevention and control of this visit, the network security prevention and control methods corresponding to the network security prevention and control level are also different. For example, when the network security prevention and control level is level 1, the network security prevention and control method at this time can be: click For unknown links, wait for the page, and display after the firewall judges the security. For example, when the network security prevention and control level is high, the network security prevention and control method at this time can be: click on the link with unknown security or upload a file At the same time, identity authentication and relevant security verification are performed. It should be understood that, the foregoing is shown by way of example and not specifically limited, and the network security prevention and control level and the corresponding network security prevention and control method may be set according to actual requirements. By generating different security prevention and control levels for different users and adopting different security prevention and control methods, it can not only ensure the normal operation of users, but also ensure the security of industrial control systems and users.

In the description of the above embodiments, specific features, structures, materials or characteristics may be combined in any one or more embodiments or examples in an appropriate manner.

While the invention has been described above with reference to the embodiments, various modifications may be made thereto and equivalents may be substituted for elements thereof without departing from the scope of the invention. In particular, as long as there is no structural conflict, the various features in the embodiments disclosed in the present invention can be used in combination with each other in any manner, and all descriptions of these combinations are not described in this specification only for omission Space and resource conservation considerations. Therefore, the present invention is not limited to the specific embodiments disclosed herein, but includes all technical solutions falling within the scope of the claims.

Those of ordinary skill in the art can understand that: the above are only preferred embodiments of the present invention, and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, for those skilled in the art, it still The technical solutions described in the foregoing embodiments may be modified, or some technical features thereof may be equivalently replaced. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (10)

1. A network security prevention and control method for an industrial control system, the method comprising:

step S1: acquiring login account information and historical behavior information of a user;

step S2: determining a grade coefficient of a user and a network security prevention and control grade of an industrial control system according to the information acquired in the step S1;

and step S3: after determining the grade coefficient of the user and the network security prevention and control grade of the industrial control system, generating corresponding access authority according to the grade coefficient of the user, and performing prevention and control on the industrial control system according to the network security prevention and control grade of the industrial control system;

in the step S1, the login account information of the user includes the registration days a of the user login account and the historical login times B of the user login account; the historical behavior information comprises historical dangerous operation times C of the user and the total historical dangerous operation duration D of the user;

in the step S2, when determining the level coefficient of the user and the network security prevention and control level of the industrial control system, determining the level coefficient of the user according to the registration days a of the user login account, and correcting the level coefficient of the user according to the historical login times B of the user login account; and when the network security prevention and control level is determined, determining the network security prevention and control level of the industrial control system according to the historical dangerous operation times C of the user, and correcting the network security prevention and control level of the industrial control system according to the total historical dangerous operation time D of the user.

2. The network security prevention and control method for the industrial control system according to claim 1, wherein when determining the level coefficient of the user according to the registration days a of the user login account, specifically:

presetting a registration day matrix A0 of a user login account, and setting A0 (A1, A2, A3, A4), wherein A1 is a first preset registration day, A2 is a second preset registration day, A3 is a third preset registration day, A4 is a fourth preset registration day, and A1 is more than A2 and more than A3 and less than A4;

presetting a level coefficient matrix E of a user, and setting E (E1, E2, E3, E4, E5), wherein E1 is a first preset level coefficient, E2 is a second preset level coefficient, E3 is a third preset level coefficient, E4 is a fourth preset level coefficient, E5 is a fifth preset level coefficient, and E1 is more than E2 and less than E3 and less than E4 and less than E5;

setting the grade coefficient of the user according to the relation between the registration days A of the user login account and the registration days of each preset user login account:

when A is less than A1, selecting the first preset level coefficient E1 as the level coefficient of the user;

when A1 is more than or equal to A and less than A2, selecting the second preset level coefficient E2 as the level coefficient of the user;

when A2 is more than or equal to A and less than A3, selecting the third preset level coefficient E3 as the level coefficient of the user;

when A3 is more than or equal to A and less than A4, selecting the fourth preset level coefficient E4 as the level coefficient of the user;

and when A is larger than or equal to A4, selecting the fifth preset level coefficient E5 as the level coefficient of the user.

3. The network security prevention and control method for the industrial control system according to claim 2, wherein when the level coefficient of the user is corrected according to the historical login times B of the login account of the user, the method specifically comprises the following steps:

presetting a historical login frequency matrix F0 of a user login account, and setting F0 (F1, F2, F3 and F4), wherein F1 is a first preset historical login frequency, F2 is a second preset historical login frequency, F3 is a third preset historical login frequency, F4 is a fourth preset historical login frequency, and F1 is more than F2 and less than F3 and less than F4;

presetting a level coefficient correction coefficient matrix h of a user, and setting h (h 1, h2, h3, h4, h 5), wherein h1 is a first preset level coefficient correction coefficient, h2 is a second preset level coefficient correction coefficient, h3 is a third preset level coefficient correction coefficient, h4 is a fourth preset level coefficient correction coefficient, h5 is a fifth preset level coefficient correction coefficient, and h1 is more than 0.8, more than h2, more than h3, more than h4, more than h5 and less than 1.2;

when the level coefficient of the user is set as the ith preset level coefficient Ei, i =1,2,3,4,5 corrects the level coefficient of the user according to the relation between the historical login times B of the user login account and the historical login times of each preset user login account:

when B is less than F1, selecting the first preset grade coefficient correction coefficient h1 to correct the ith preset grade coefficient Ei, wherein the grade coefficient of the corrected user is Ei x h1;

when F1 is not less than B and less than F2, selecting the second preset grade coefficient correction coefficient h2 to correct the ith preset grade coefficient Ei, wherein the grade coefficient of the corrected user is Ei x h2;

when F2 is not more than B and less than F3, selecting the third preset level coefficient correction coefficient h3 to correct the ith preset level coefficient Ei, wherein the corrected level coefficient of the user is Ei h3;

when F3 is not more than B and less than F4, selecting the fourth preset level coefficient correction coefficient h4 to correct the ith preset level coefficient Ei, wherein the corrected level coefficient of the user is Ei h4;

and when B is larger than or equal to F4, selecting the fifth preset grade coefficient correction coefficient h5 to correct the ith preset grade coefficient Ei, wherein the grade coefficient of the corrected user is Ei h5.

4. The network security prevention and control method for the industrial control system according to claim 1, wherein when determining the network security prevention and control level of the industrial control system according to the historical dangerous operation times C of the user, specifically:

presetting a historical dangerous operation frequency matrix G0 of a user, and setting G0 (G1, G2, G3 and G4), wherein G1 is a first preset historical dangerous operation frequency, G2 is a second preset historical dangerous operation frequency, G3 is a third preset historical dangerous operation frequency, G4 is a fourth preset historical dangerous operation frequency, and G1 is more than G2 and less than G3 and less than G4;

presetting a network security prevention and control level matrix K of the industrial control system, and setting K (K1, K2, K3, K4, K5), wherein K1 is a first preset network security prevention and control level, K2 is a second preset network security prevention and control level, K3 is a third preset network security prevention and control level, K4 is a fourth preset network security prevention and control level, K5 is a fifth preset network security prevention and control level, and K1 is more than K2 and less than K3 and less than K4 and less than K5;

setting the network security prevention and control level of the industrial control system according to the relation between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user:

when C is less than G1, selecting the first preset network security prevention and control level K1 as the network security prevention and control level of the industrial control system;

when G1 is not more than C and less than G2, selecting the second preset network security prevention and control level K2 as the network security prevention and control level of the industrial control system;

when G2 is less than or equal to C and less than G3, selecting the third preset network security prevention and control level K3 as the network security prevention and control level of the industrial control system;

when G3 is more than or equal to C and less than G4, selecting the fourth preset network security prevention and control level K4 as the network security prevention and control level of the industrial control system;

and when C is larger than or equal to G4, selecting the fifth preset network security prevention and control level K5 as the network security prevention and control level of the industrial control system.

5. The network security prevention and control method for the industrial control system according to claim 4, wherein when the network security prevention and control level of the industrial control system is modified according to the total historical dangerous operation duration D of the user, the method comprises the following steps:

presetting a historical dangerous operation total time matrix M0 of a user, and setting M0 (M1, M2, M3, M4), wherein M1 is a first preset historical dangerous operation total time, M2 is a second preset historical dangerous operation total time, M3 is a third preset historical dangerous operation total time, M4 is a fourth preset historical dangerous operation total time, and M1 is more than M2 and more than M3 and more than M4;

presetting a network security prevention and control grade correction coefficient matrix n of an industrial control system, and setting n (n 1, n2, n3, n4, n 5), wherein n1 is a first preset network security prevention and control grade correction coefficient, n2 is a second preset network security prevention and control grade correction coefficient, n3 is a third preset network security prevention and control grade correction coefficient, n4 is a fourth preset network security prevention and control grade correction coefficient, n5 is a fifth preset network security prevention and control grade correction coefficient, and n1 is more than 0.8 and more than n2 and more than n3 and more than n4 and less than n5 and less than 1.2;

when the network security prevention and control level of the industrial control system is set as the ith preset network security prevention and control level Ki, i =1,2,3,4,5, and the network security prevention and control level of the industrial control system is corrected according to the relation between the total historical dangerous operation duration D of the user and the total historical dangerous operation duration of each preset user:

when D is less than M1, selecting the first preset network security prevention and control grade correction coefficient n1 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n1;

when M1 is not more than D and less than M2, selecting the second preset network security prevention and control grade correction coefficient n2 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n2;

when M2 is less than or equal to D and less than M3, selecting a third preset network security prevention and control grade correction coefficient n3 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n3;

when M3 is less than or equal to D and less than M4, selecting a fourth preset network security prevention and control grade correction coefficient n4 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n4;

and when D is larger than or equal to M4, selecting a fifth preset network security prevention and control grade correction coefficient n5 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n5.

6. A network security prevention and control system for an industrial control system, the system comprising:

the acquisition module is used for acquiring login account information and historical behavior information of a user;

the determining module is used for determining the grade coefficient of the user and the network security prevention and control grade of the industrial control system according to the information acquired in the acquiring module;

the control module is used for generating corresponding access authority according to the grade coefficient of the user after the grade coefficient of the user and the network security prevention and control grade of the industrial control system are determined, and performing prevention and control on the industrial control system according to the network security prevention and control grade of the industrial control system;

in the acquisition module, the login account information of the user comprises the registration days A of the login account of the user and the historical login times B of the login account of the user; the historical behavior information comprises historical dangerous operation times C of the user and the total historical dangerous operation duration D of the user;

in the determining module, when determining the level coefficient of a user and the network security prevention and control level of an industrial control system, determining the level coefficient of the user according to the registration days A of the user login account, and correcting the level coefficient of the user according to the historical login times B of the user login account; and when the network security prevention and control level is determined, determining the network security prevention and control level of the industrial control system according to the historical dangerous operation times C of the user, and correcting the network security prevention and control level of the industrial control system according to the total historical dangerous operation time D of the user.

7. The network security prevention and control system for an industrial control system according to claim 6, wherein in the determining module, when determining the level coefficient of the user according to the registration days a of the user logging in the account, specifically:

the determining module is used for presetting a registration day matrix A0 of a login account of a user and setting A0 (A1, A2, A3 and A4), wherein A1 is a first preset registration day, A2 is a second preset registration day, A3 is a third preset registration day, A4 is a fourth preset registration day, and A1 is more than A2 and is more than A3 and is more than A4;

the determining module is used for presetting a level coefficient matrix E of a user and setting E (E1, E2, E3, E4, E5), wherein E1 is a first preset level coefficient, E2 is a second preset level coefficient, E3 is a third preset level coefficient, E4 is a fourth preset level coefficient, E5 is a fifth preset level coefficient, and E1 is more than E2 and less than E3 and less than E4 and less than E5;

the determining module is further configured to set a level coefficient of the user according to a relationship between the registration days a of the user login account and the registration days of each preset user login account:

when A is less than A1, selecting the first preset level coefficient E1 as the level coefficient of the user;

when A1 is more than or equal to A and less than A2, selecting the second preset level coefficient E2 as the level coefficient of the user;

when A2 is more than or equal to A and less than A3, selecting the third preset level coefficient E3 as the level coefficient of the user;

when A3 is more than or equal to A and less than A4, selecting the fourth preset level coefficient E4 as the level coefficient of the user;

and when A is larger than or equal to A4, selecting the fifth preset level coefficient E5 as the level coefficient of the user.

8. The system according to claim 7, wherein in the determining module, when the level coefficient of the user is modified according to the historical login times B of the user login account, the modifying is specifically:

the determining module is used for presetting a historical login time matrix F0 of a user login account and setting F0 (F1, F2, F3 and F4), wherein F1 is a first preset historical login time, F2 is a second preset historical login time, F3 is a third preset historical login time, F4 is a fourth preset historical login time, and F1 is more than F2 and less than F3 and less than F4;

the determining module is used for presetting a level coefficient correction coefficient matrix h of a user and setting h (h 1, h2, h3, h4, h 5), wherein h1 is a first preset level coefficient correction coefficient, h2 is a second preset level coefficient correction coefficient, h3 is a third preset level coefficient correction coefficient, h4 is a fourth preset level coefficient correction coefficient, h5 is a fifth preset level coefficient correction coefficient, and h1 is more than 0.8, more than h2, more than h3, more than h4, more than h5 and less than 1.2;

the determining module is further configured to, when the level coefficient of the user is set as the i-th preset level coefficient Ei, i =1,2,3,4,5, correct the level coefficient of the user according to a relationship between the historical login number B of the user login account and the historical login number of each preset user login account:

when B is less than F1, selecting the first preset grade coefficient correction coefficient h1 to correct the ith preset grade coefficient Ei, wherein the grade coefficient of the corrected user is Ei x h1;

when F1 is not more than B and less than F2, selecting the second preset level coefficient correction coefficient h2 to correct the ith preset level coefficient Ei, wherein the corrected level coefficient of the user is Ei h2;

when F2 is not more than B and less than F3, selecting the third preset level coefficient correction coefficient h3 to correct the ith preset level coefficient Ei, wherein the corrected level coefficient of the user is Ei h3;

when F3 is not more than B and less than F4, selecting the fourth preset level coefficient correction coefficient h4 to correct the ith preset level coefficient Ei, wherein the corrected level coefficient of the user is Ei h4;

and when B is larger than or equal to F4, selecting the fifth preset grade coefficient correction coefficient h5 to correct the ith preset grade coefficient Ei, wherein the grade coefficient of the corrected user is Ei h5.

9. The cyber security and control system for an industrial control system according to claim 6, wherein in the determining module, when determining the cyber security and control level of the industrial control system according to the historical dangerous operation times C of the user, specifically:

the determining module is used for presetting a historical dangerous operation frequency matrix G0 of a user and setting G0 (G1, G2, G3 and G4), wherein G1 is a first preset historical dangerous operation frequency, G2 is a second preset historical dangerous operation frequency, G3 is a third preset historical dangerous operation frequency, G4 is a fourth preset historical dangerous operation frequency, and G1 is greater than G2 and is greater than G3 and is greater than G4;

the determining module is used for presetting a network security prevention and control level matrix K of the industrial control system and setting K (K1, K2, K3, K4 and K5), wherein K1 is a first preset network security prevention and control level, K2 is a second preset network security prevention and control level, K3 is a third preset network security prevention and control level, K4 is a fourth preset network security prevention and control level, K5 is a fifth preset network security prevention and control level, and K1 is greater than K2 and less than K3 and less than K4 and less than K5;

the determining module is further configured to set a network security prevention and control level of the industrial control system according to a relationship between the historical dangerous operation times C of the user and the historical dangerous operation times of each preset user:

when C is less than G1, selecting the first preset network security prevention and control level K1 as the network security prevention and control level of the industrial control system;

when G1 is not more than C and less than G2, selecting the second preset network security prevention and control level K2 as the network security prevention and control level of the industrial control system;

when G2 is more than or equal to C and less than G3, selecting the third preset network security prevention and control level K3 as the network security prevention and control level of the industrial control system;

when G3 is less than or equal to C and less than G4, selecting the fourth preset network security prevention and control level K4 as the network security prevention and control level of the industrial control system;

and when C is larger than or equal to G4, selecting the fifth preset network security prevention and control level K5 as the network security prevention and control level of the industrial control system.

10. The cyber security and control system for an industrial control system according to claim 9, wherein in the determination module, when the cyber security and control level of the industrial control system is modified according to the historical dangerous operation total duration D of the user, specifically:

the determining module is used for presetting a historical dangerous operation total time matrix M0 of a user and setting M0 (M1, M2, M3 and M4), wherein M1 is a first preset historical dangerous operation total time, M2 is a second preset historical dangerous operation total time, M3 is a third preset historical dangerous operation total time, M4 is a fourth preset historical dangerous operation total time, and M1 is more than M2 and more than M3 and more than M4;

the determining module is used for presetting a network security prevention and control grade correction coefficient matrix n of the industrial control system and setting n (n 1, n2, n3, n4, n 5), wherein n1 is a first preset network security prevention and control grade correction coefficient, n2 is a second preset network security prevention and control grade correction coefficient, n3 is a third preset network security prevention and control grade correction coefficient, n4 is a fourth preset network security prevention and control grade correction coefficient, n5 is a fifth preset network security prevention and control grade correction coefficient, and n1 is more than 0.8 and more than n2 and more than n3 and more than n4 and more than n5 and less than 1.2;

the determining module is further configured to, when the network security prevention and control level of the industrial control system is set to the ith preset network security prevention and control level Ki, i =1,2,3,4,5, modify the network security prevention and control level of the industrial control system according to a relationship between the total historical dangerous operation duration D of the user and the total historical dangerous operation duration of each preset user:

when D is less than M1, selecting the first preset network security prevention and control grade correction coefficient n1 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n1;

when M1 is not more than D and less than M2, selecting the second preset network security prevention and control grade correction coefficient n2 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n2;

when M2 is less than or equal to D and less than M3, selecting a third preset network security prevention and control grade correction coefficient n3 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n3;

when M3 is less than or equal to D and less than M4, selecting a fourth preset network security prevention and control grade correction coefficient n4 to correct the ith preset network security prevention and control grade Ki, wherein the corrected network security prevention and control grade of the industrial control system is Ki x n4;

and when D is larger than or equal to M4, selecting a fifth preset network safety prevention and control grade correction coefficient n5 to correct the ith preset network safety prevention and control grade Ki, wherein the corrected network safety prevention and control grade of the industrial control system is Ki x n5.

Images