Click “Wangyu Xingyun” to follow us
Background Description
Level protection plays a crucial role in network security assurance and the construction of a strong cyber nation. To adapt to the development of new technologies and meet the needs of level protection work for information systems in industrial control, cloud computing, the Internet of Things, and mobile interconnectivity, the Ministry of Public Security has organized the declaration of national standards for key standards in the new field of information technology, marking the entry of level protection into the 2.0 era.
At the 2019 Industrial Security Conference (ISSC2019), leaders from the Ministry of Public Security stated that security in the industrial control field is of utmost importance and is a key focus for the country in terms of network security level protection. Moving forward, relevant departments will intensify their analysis of security threats in industrial control and the formulation of protective measures.
Currently, security inspection and risk assessment of industrial control systems face numerous challenges, summarized as follows:
1. High technical “threshold”; ordinary technical personnel and testing tools are inadequate;
2. Inspection methods and standards are not unified, making it impossible to ensure that different technical personnel have a consistent evaluation standard;
3. Inspection methods are overly simplistic, leading to subjective conclusions that lack multi-dimensional objective data support;
4. Compliance is difficult to judge; the technical requirements for industrial control system security are not broken down, making them hard to understand, execute, and assess;
5. Difficult to output rectification suggestions; all testing results and assessment conclusions require manual output.
Wangyu Xingyun has been deeply engaged in the field of industrial control security for many years. In response to the difficulties faced by regulatory bodies, evaluation institutions, and operational units of industrial control systems, and the high level of professionalism required for inspectors, we have launched the Wangyu Industrial Control System Security Inspection Toolbox.
Product Introduction
The Wangyu Industrial Control System Security Inspection Toolbox (abbreviated as: Wangyu Industrial Control Inspection Toolbox) is a portable integrated device based on Level Protection Basic Requirements 2.0. It combines various technical means such as information investigation and collection, compliance security inspection, asset security inspection, abnormal behavior inspection, malicious code inspection, and wireless WIFI inspection, while unifying inspection methods and standards to lower the technical “threshold” for inspections, enabling professional security inspections and risk assessments of industrial control systems.
Business Process
Technical Tools
1. Information Investigation and Collection: Supports collection of unit information, system information, asset information, and traffic information;
2. Compliance Inspection: Supports level protection 2.0 inspection index templates, with all inspection indicators broken down by experts into inspection points, inspection knowledge, predicted results, and risk alerts for easier understanding and on-site execution;
3. Asset Security Inspection: Supports industrial control system asset management, vulnerability inspection, and baseline inspection;
4. Abnormal Behavior Inspection: Supports security detection of communication traffic and industrial control protocols between nodes in critical areas of industrial control systems, identifying abnormal behaviors and potential threats;
5. Industrial Control Protocol Analysis: Supports in-depth analysis and compliance judgment of special industrial control protocols within industrial control systems;
6. Malicious Code Inspection: Supports inspection of malicious code (e.g., viruses, trojans) on industrial control information devices;
7. Wireless WIFI Inspection: Supports security inspection of wireless WIFI hotspots used in industrial control systems;
8. Video Surveillance Device Inspection: Supports inspection of online video surveillance devices classified as level four in security level protection.
Solutions and Value
1. Lowering the Technical “Threshold”: Transforms complex compliance inspections into automated program detections, allowing ordinary technical personnel to start work after simple training;
2. Unified Inspection Methods and Standards: Ensures that different technicians can work according to the same methods and standards, minimizing the impact of personnel factors on inspection results;
3. Integration of Various Professional Inspection Tools: Combines years of research and accumulation of key technologies in level protection and industrial control security by Wangyu Xingyun, providing expert technical support for the Wangyu Industrial Control Toolbox;
4. Professional Compliance Judgment: Integrates the level protection 2.0 inspection index system, breaking it down into inspection points, inspection knowledge, predicted results, and risk alerts, making it easy to understand, learn, and execute on-site compliance judgments;
5. Automatic Output of Rectification Suggestions: The Wangyu Industrial Control Inspection Toolbox combines management-related inspection results and technical inspection results to automatically generate inspection reports and provide rectification suggestions.
Typical Applications
1. Professionally assist network security regulatory units in conducting supervision and inspection of industrial control system security level protection;
2. Professionally assist evaluation institutions and system operation and usage units in conducting risk assessments and self-checks of industrial control system security level protection.
Conclusion
Since its release, the Wangyu Industrial Control Inspection Toolbox has been practically applied in various industries such as power plants, petrochemicals, and rail transit, assisting these units in monitoring and inspecting internal networks and conducting risk assessments for special equipment, receiving high recognition from clients. In the future, Wangyu Xingyun will further increase its technical research and investment in the Wangyu Industrial Control Inspection Toolbox, committed to providing better product value and user experience for clients.
