Faced with increasingly severe security threats to industrial control system,the security solutions of the active isolation and passive detection are usually taken. However,these solutions can be only used as a means to deal with the border security of industrial control systems,but cannot solve the issues in internal networks of the system and effective communication entirely,and the intruders can still take advantage of a variety of means to intrude into the internal network to conduct link data destruction. Considering the security requirement of data in the application layer,a communication data encryption protection method based on encryption gateway is proposed for the industrial control systems,in which RC4 encryption algorithm is adopted to effectively protect the communication data between upper computer and PLC.%面对日趋严峻的工业控制系统安全威胁，通常采取主动隔离和被动检测的安全解决方案，然而这些方案仅能作为解决工业控制系统边界安全的一种手段，对于解决系统内部网络以及有效通信等问题作用不是太大，侵入者依旧可以利用各种手段侵入到内部网络进行链路数据破坏。该文从应用层数据安全需求出发，提出一种基于加密网关的工业控制系统通信数据加密防护方法，采用RC4加密算法有效保护上位机与PLC的通信数据安全。实践表明，该方案可靠、稳定、安全，能满足以太网环境下数据加密传输的需要。
展开▼
