Research And Development Of Security Reinforcement Software For Linux Host Based On EDPF-NT+DCS

Industrial control system is widely used in the field of national infrastructure construction,which is related to economic development,social stability and national security.At present,the security of industrial information system has been paid much attention,and it has been listed in the latest information system security level protection requirements.This paper studies the information security of ICS from the operating system level.In order to meet the basic requirements of information system security level protection in power industry,the security reinforcement strategy based on Linux operating system is analyzed according to the actual situation of DCS workstation in power plant.It is not only cumbersome and inefficient,but also prone to mistakes when configuring the security policy of the operating system through linux commands?Therefore,in order to further improve the automation level of the power plant,the Linux host security reinforcement system based on the graphical interface is designed,so that the operator can visually check and reinforce the operating system.In order to solve the problem of insufficient software support for Linux system,this paper also conducts relevant research on how to be compatible with Windows applications in Linux systems,and proposes a software migration scheme based on wxWidgets and a compatible operation scheme based on wine,and verifies their feasibility through migration test.The thesis first analyzes the characteristics of Linux systems and their advantages in the field of industrial control compared with Windows systems,and then further analyzes the local reinforcement strategy of Linux hosts.Based on the reinforcement strategy and the actual security protection requirements of DCS,the software requirements analysis is performed;then software design modeling is performed using the StarUML;finally,the host hardening system is implemented by programming in the Qt development framework.Linux system has developed rapidly in recent years due to its security and stability,but its market share is still far less than that of Windows system.One of the main reasons is insufficient software support.Aiming at this problem,this paper proposes a software migration scheme based on wxWidgets and a software compatible operation scheme based on wine.The feasibility of these two methods is verified by test experiments.The application scope of the two methods is compared and analyzed to provide alternative solutions to solve the problem of insufficient linux software support.