Research On Continuous Detection Of Critical Infrastructure In Cyberspace

The Critical Infrastructure refers specifically to public assets that are vital to the functioning of a society and economy,such as power supply systems,communication systems and transport systems.With the rapid development and wide application of Internet Technology,the supervisory control and data acquisition technology based on IP protocol are rapidly emerging.Many Critical Infrastructures have been attached to the network due to the efficiency and convenience of management.While accessing to the network results in the efficiency gains,it has also introduced new attack surfaces.Insecurity factors in the Internet,such as worms,will surely affect these Critical Infrastructure.The importance of critical infrastructure is beyond doubt.In order to reduce the damage caused by cyberattacks,this paper focuses on the continuous detection technology for critical infrastructure in cyberspace.Relevant maintainers can use this technology to evaluate the vulnerabilities of these assets and protect them timely.This paper proposes a stateless rapid port scanning technology based on distributed architecture,which combines the rapid port scanning technology with distributed scheduling algorithm to improve the port scanning speed.The distributed scheduling algorithm makes full use of the advantages of multi-node,and avoid using the same node to scan the same CIDR addresses with high frequency,thus reducing the probability of being banned by the target network's firewall.On this basis,this paper further proposed a plug-in network equipment detection technology,as a supplement to the distributed architecture.The technology uses a plug-in execution engine to load the corresponding plug-ins for further detection.This technology can thus cover various types of network device.Based on the technologies mentioned above,we design and implement a Distributed Critical Infrastructure Continuous Detection System,which can continuously detect the Critical Infrastructures in cyberspace and present the complete results with data retrieval and visualization techniques.