METHOD OF INTRUSION RESPONSE FOR CONTROL AND INSTRUMENTATION SYSTEM NETWORK

摘要

A method for countering network intrusion in a control/measurement system is provided to strengthen blocking time/countermeasure in case that the same intrusion is repeated by forming the countering rules for important intrusions, and prevent unnecessary line-stop by generating the countering rule according to an importance factor in the case of the intrusion not corresponding to the countering rules. The intrusion is detected by collecting packets flown into the control/measurement system(S210). In case that the instruction is corresponding to the countering rule, it is checked whether the same intrusion is repeated for a predetermined time(S230). In case that the intrusion is not repeated for the predetermined time, the countermeasure is applied based on the countering rule according to the preset importance(S220). In case that the same intrusion is repeated, the countermeasure is gradually strengthened based on the countering rule according to the preset important intrusion(S320). The intrusion is blocked according to the countermeasure(S400).