For the fragile security status and the growing threat of attack on industrial control systems, it is paticu1arly important to strengthen the technology of security protection. After a detailed study of the characteristics of industrial control systems, this paper put forward design scheme of industrial firewall based on Modbus/TCP protocol combining qwhite listq security policies with deep packet inspection technology, and realizing on the Linux platform. The experimenta1 results show that the firewall can effectively intercept illegal data stream and ensure the normal operation of the industrial control system.
['Wenli Shang', 'Quansheng Qiao', 'Ming Wan', 'Peng Zeng']
Design and implementation of industrial firewall for Modbus/TCP