CN111245638A - Fault repairing method and device for industrial control firewall, storage medium and terminal - Google Patents

Fault repairing method and device for industrial control firewall, storage medium and terminal Download PDF

Info

Publication number
CN111245638A
CN111245638A CN201911343738.7A CN201911343738A CN111245638A CN 111245638 A CN111245638 A CN 111245638A CN 201911343738 A CN201911343738 A CN 201911343738A CN 111245638 A CN111245638 A CN 111245638A
Authority
CN
China
Prior art keywords
fault
function unit
industrial control
firewall
repairing
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
CN201911343738.7A
Other languages
Chinese (zh)
Inventor
刘长辉
冯全宝
黄敏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Winicssec Technologies Co Ltd
Original Assignee
Beijing Winicssec Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Winicssec Technologies Co Ltd filed Critical Beijing Winicssec Technologies Co Ltd
Priority to CN201911343738.7A priority Critical patent/CN111245638A/en
Publication of CN111245638A publication Critical patent/CN111245638A/en
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0654Management of faults, events, alarms or notifications using network fault recovery
    • H04L41/0668Management of faults, events, alarms or notifications using network fault recovery by dynamic selection of recovery network elements, e.g. replacement by the most appropriate element after failure
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls

Abstract

The invention discloses a fault repairing method, a fault repairing device, a storage medium and a terminal of an industrial control firewall, wherein the method comprises the following steps: determining a fault function unit in the processing function units according to the fault of the industrial control firewall; generating a repairing dynamic library according to the fault function unit; and calling a repairing dynamic library to replace the fault function unit to complete the repairing process of the industrial control firewall. By implementing the method, when the industrial control firewall is determined to have a fault, other processing function units of the industrial control firewall can continue to work to realize partial protection function of the firewall; meanwhile, a fault function unit can be determined according to the fault of the industrial control firewall, a repairing dynamic library which can be used as a substitute function unit is generated, and the repairing process of the industrial control firewall is completed by calling the repairing dynamic library. Therefore, when the firewall breaks down, the system does not need to be restarted, and the technical problem of data analysis errors caused by context loss in the fault repair process of the industrial control firewall is solved.

Description

Fault repairing method and device for industrial control firewall, storage medium and terminal
Technical Field
The invention relates to the technical field of industrial control safety, in particular to a fault repairing method and device of an industrial control firewall, a storage medium and a terminal.
Background
With the continuous development of industrial informatization construction and the continuous deepening of the process of 'two-purpose', the traditional security threat and the unique security threat of the industrial control network faced by the industrial network are continuously increased. The improvement of the interconnection degree of the industrial network enables the traditional security threat to quickly permeate into the industrial network, corresponding security protection measures are not considered in the early stage of the originally closed industrial network, and serious security risks exist in various aspects such as data stealing, access authentication, wireless connection, security tracing and the like. Therefore, the industrial network has great potential safety hazard at present, and a comprehensive and deep security defense strategy is urgently needed to be provided for effective protection. The boundary safety protection is an important key link for the first time, and the industrial firewall naturally becomes the preferred safety equipment for the safety construction of the industrial network boundary.
The industrial control firewall is used as an important safety protection facility in an industrial field and has high reliability. Once a failure occurs, it is necessary to ensure that the network data flow is not affected by the failure. At present, there are two main schemes for fault handling of industrial control firewalls: one is a software replacement scheme, which needs to stop the service processing of the fault software, then switch the network to a hardware direct-conversion mode, restart the system and then switch back to the firewall protection state, however, in the process of repairing the problem, the firewall needs to be restarted, but the restart will cause the problem of data analysis error due to context loss; the other scheme is a dual-computer hot-standby scheme, in which firstly, the service flow is switched to a backup firewall through a dual-computer hot-standby system to complete the software replacement work of the faulty equipment, and finally, the dual-computer switching is completed through a dual-computer hot-standby protocol to restore the original main-standby state, however, the dual-computer hot-standby can be completed only by using two times of equipment, thereby greatly increasing the purchasing cost.
Disclosure of Invention
In view of this, embodiments of the present invention provide a method, an apparatus, a storage medium, and a terminal for repairing a fault of an industrial firewall, so as to solve a technical problem of a data analysis error caused by context loss when a program is restarted in a fault repairing process of an industrial firewall.
The technical scheme provided by the invention is as follows:
the first aspect of the embodiments of the present invention provides a fault repairing method for an industrial control firewall, where the fault repairing method includes the following steps: determining a fault function unit in the processing function units according to the fault of the industrial control firewall; generating a repairing dynamic library according to the fault function unit; and calling the repairing dynamic library to replace the fault function unit to complete the repairing process of the industrial control firewall.
Optionally, determining a failure function unit in the processing function unit according to a failure of the industrial control firewall, further comprising: judging whether the industrial control firewall has a fault or not; when the industrial control firewall breaks down, judging the fault type of the industrial control firewall; and when the fault type of the industrial control firewall is a software fault, determining a fault function unit according to the fault of the industrial control firewall.
Optionally, before determining a failure functional unit in the processing functional units according to the failure of the industrial control firewall, the method further includes: creating an index table according to a processing function unit of the industrial control firewall; generating an index pointer of the processing function unit according to the index table; and calling a corresponding processing function unit according to the index pointer to finish the protection process of the industrial control firewall.
Optionally, the repairing the dynamic library comprises: the method comprises the following steps that an entry function unit and a patch function unit are called, the dynamic repair library is used for replacing the fault function unit to complete the repair process of the industrial control firewall, and the method comprises the following steps: calling an entry function unit in the repaired dynamic library according to the dynamic library command line; modifying the index pointer of the fault function unit to a patch function unit in the dynamic repair library according to the entry function unit; and replacing the fault function unit with the patch function unit to complete the repair process of the industrial control firewall.
A second aspect of the embodiments of the present invention provides a fault repairing apparatus for an industrial firewall, where the fault repairing apparatus includes: the fault determining module is used for determining a fault function unit in the processing function units according to the fault of the industrial control firewall; the dynamic library generating module is used for generating a repairing dynamic library according to the fault function unit; and the repairing module is used for calling the repairing dynamic library to replace the fault function completion unit to form the repairing process of the industrial control firewall.
Optionally, the fault determination module further comprises: the first judgment module is used for judging whether the industrial control firewall breaks down or not; the second judging module is used for judging the fault type of the industrial control firewall when the industrial control firewall breaks down; and the fault determining submodule is used for determining a fault function unit in the processing function unit according to the fault of the industrial control firewall when the fault type of the industrial control firewall is a software fault.
Optionally, the apparatus for repairing a fault of an industrial firewall further includes: the index table creating module is used for creating an index table according to the processing function unit of the industrial control firewall; the pointer generation module is used for generating an index pointer of the processing function unit according to the index table; and the protection module is used for calling a corresponding processing function unit according to the index pointer to finish the protection process of the industrial control firewall.
Optionally, the repairing the dynamic library comprises: an entry function unit and a patch function unit; the repair module includes: the entry function unit calling module is used for calling an entry function unit in the repaired dynamic library according to the dynamic library command line; a pointer modification module, configured to modify the index pointer of the fault function unit to the patch function unit in the dynamic repair library according to the entry function unit; and the repair submodule is used for completing the repair process of the industrial control firewall according to the patch function unit instead of the fault function unit.
A third aspect of the embodiments of the present invention provides a computer-readable storage medium, where the computer-readable storage medium stores computer instructions, where the computer instructions are configured to enable a computer to execute the method for repairing a fault of an industrial firewall according to any one of the first aspect and the first aspect of the embodiments of the present invention.
A fourth aspect of the present invention provides a fault repairing terminal for an industrial control firewall, including: the storage and the processor are connected with each other in a communication manner, the storage stores computer instructions, and the processor executes the computer instructions to execute the method for repairing the fault of the industrial control firewall according to the first aspect of the embodiment of the invention.
The technical scheme provided by the invention has the following effects:
according to the method, the device, the storage medium and the terminal for repairing the fault of the industrial control firewall, provided by the embodiment of the invention, when the fault of the industrial control firewall is determined, other processing function units of the industrial control firewall can continue to work, so that part of protection functions of the firewall are realized; meanwhile, a fault function unit can be determined according to the fault of the industrial control firewall, a repairing dynamic library which can be used as a substitute function unit is generated according to the fault function unit, and the repairing process of the industrial control firewall is completed by calling the repairing dynamic library. Therefore, the fault repairing method for the industrial control firewall provided by the embodiment of the invention does not need to restart the system when the firewall breaks down, and solves the technical problem of data analysis errors caused by context loss during program restart in the fault repairing process of the industrial control firewall in the prior art. Meanwhile, compared with the double-computer hot standby scheme adopted in the prior art, the method for repairing the fault of the industrial control firewall provided by the embodiment of the invention does not need double number of devices, and reduces the repairing cost of the industrial control firewall.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings can be obtained by those skilled in the art without creative efforts.
FIG. 1 is a flow chart of a method for repairing a fault of an industrial firewall according to an embodiment of the present invention;
FIG. 2 is a flow chart of a method for fault recovery of an industrial firewall according to another embodiment of the invention;
FIG. 3 is a flowchart of a method for fault recovery of an industrial firewall according to another embodiment of the present invention;
FIG. 4 is a flowchart of a method for fault recovery of an industrial firewall according to another embodiment of the invention;
FIG. 5 is a block diagram of a fault recovery apparatus for an industrial firewall according to an embodiment of the present invention;
fig. 6 is a block diagram of a fault repairing apparatus of an industrial firewall according to another embodiment of the present invention;
fig. 7 is a block diagram of a fault repairing apparatus of an industrial firewall according to another embodiment of the present invention;
fig. 8 is a block diagram of a fault repairing apparatus of an industrial firewall according to another embodiment of the present invention;
fig. 9 is a block diagram of a fault repairing apparatus of an industrial firewall according to another embodiment of the present invention;
fig. 10 is a block diagram of a fault repairing apparatus of an industrial firewall according to another embodiment of the present invention;
fig. 11 is a schematic hardware structure diagram of a fault repair terminal of an industrial firewall according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Example 1
The embodiment of the invention provides a fault repairing method for an industrial control firewall, which comprises the following steps of:
step S101: determining a fault function unit in the processing function units according to the fault of the industrial control firewall; specifically, the industrial control firewall is an important safety protection facility in an industrial field, and has functions of access control, safety domain management, network address conversion, protocol filtering for an industrial protocol, protocol deep analysis and the like. Therefore, the industrial firewall may include a plurality of processing function units, and the plurality of processing function units may respectively implement different functions of the industrial firewall. When the industrial control firewall breaks down, which function breaks down can be judged, and therefore the broken-down function unit in the processing function units can be determined.
Step S102: generating a repairing dynamic library according to the fault function unit; specifically, after a processing function unit with a fault is determined, the fault function unit can be repaired to obtain a repaired dynamic library; and generating a new processing function unit capable of realizing the same function as a repair dynamic library according to the failed processing function unit.
Step S103: and calling a repairing dynamic library to replace the fault function unit to complete the repairing process of the industrial control firewall. Specifically, when it is determined that the industrial control firewall has a fault, other processing function units of the industrial control firewall can continue to work, so that a part of protection functions of the firewall are realized; meanwhile, a repairing dynamic library is generated according to the step S101 and the step S102, and the repairing dynamic library is called to replace the fault function unit to realize the corresponding function of the fault function unit, so that the fault repairing process of the industrial control firewall is realized.
According to the fault repairing method for the industrial control firewall, provided by the embodiment of the invention, when the industrial control firewall is determined to have a fault, other processing function units of the industrial control firewall can continue to work, so that part of protection functions of the firewall are realized; meanwhile, a fault function unit can be determined according to the fault of the industrial control firewall, a repairing dynamic library which can be used as a substitute function unit is generated according to the fault function unit, and the repairing process of the industrial control firewall is completed by calling the repairing dynamic library. Therefore, the fault repairing method for the industrial control firewall provided by the embodiment of the invention does not need to restart the system when the firewall breaks down, and solves the technical problem of data analysis errors caused by context loss during program restart in the fault repairing process of the industrial control firewall in the prior art. Meanwhile, compared with the double-computer hot standby scheme adopted in the prior art, the method for repairing the fault of the industrial control firewall provided by the embodiment of the invention does not need double number of devices, and reduces the repairing cost of the industrial control firewall.
As an optional implementation manner of the embodiment of the present invention, as shown in fig. 2, the step S101 of determining a failure function unit in the processing function unit according to the failure of the industrial control firewall includes the following steps:
step S201: and judging whether the industrial control firewall breaks down or not.
Step S202: and when the industrial control firewall breaks down, judging the fault type of the industrial control firewall.
Step S203: and when the fault type of the industrial control firewall is a software fault, determining a fault function unit according to the fault of the industrial control firewall.
Specifically, the industrial firewall mainly includes two parts, namely hardware and software running on the hardware, when the industrial firewall fails, it may be determined whether the failed part is the hardware or the software, and when the software part of the industrial firewall fails, the failed part may be repaired according to the method for repairing the failure of the industrial firewall from step S101 to step S103.
As an optional implementation manner of the embodiment of the present invention, as shown in fig. 3, before determining and processing a failure function unit in the function unit according to a failure of the industrial firewall in step S101, the method further includes:
step 301: and creating an index table according to the processing function unit of the industrial control firewall.
Step 302: and generating an index pointer of the processing function unit according to the index table.
Step 303: and calling the corresponding processing function unit according to the index pointer to finish the protection process of the industrial control firewall.
Specifically, because the industrial control firewall includes a plurality of processing function units capable of implementing different functions, an index mechanism may be added to the industrial control firewall, an index table may be created, the index table may index to a corresponding processing function unit through a name, and when the industrial control firewall performs protection, the index table may call a corresponding processing function unit to perform protection. Furthermore, if the index table is already set in the industrial firewall, the index table does not need to be generated again according to the method of the above step S301 to step S303.
As an optional implementation manner of the embodiment of the present invention, repairing the dynamic library may include: as shown in fig. 4, step S103 calls a repair dynamic library to replace the failed function unit to complete the repair process of the industrial firewall, where the method includes the following steps:
step S401: and calling and repairing an entry function unit in the dynamic library according to the dynamic library command line.
Step S402: and modifying the index pointer of the fault function unit to a patch function unit in the repair dynamic library according to the entry function unit.
Step S403: and the repair process of the industrial control firewall is completed by replacing the fault function unit with the patch function unit.
Specifically, when a repair dynamic library is generated, an entry function unit and a patch function unit may be set in the dynamic library. When the dynamic library is called and repaired, a dynamic library command in the industrial control firewall can be directly adopted for calling, specifically, an entry function unit can be called at first, and the entry function unit can be used for modifying an index pointer corresponding to the fault function unit to a patch function unit, so that after the entry function unit completes the function, the patch function unit can replace the fault function unit under the action of the index pointer to complete the repairing process of the industrial control firewall. After the repairing process is completed, the industrial control firewall can realize the complete protection function according to other processing function units and patch function units.
Example 2
An embodiment of the present invention provides a fault repairing apparatus for an industrial firewall, as shown in fig. 5, the fault repairing apparatus includes:
the fault determining module 10 is configured to determine a fault function unit in the processing function units according to a fault of the industrial control firewall; for details, refer to the related description of step S101 in the above method embodiment.
A dynamic library generating module 20, configured to generate a repair dynamic library according to the fault function unit; for details, refer to the related description of step S102 in the above method embodiment.
And the repairing module 30 is used for calling the repairing dynamic library to replace the fault function completion unit to form a protection process of the industrial control firewall. For details, refer to the related description of step S103 in the above method embodiment.
According to the fault repairing device for the industrial control firewall, provided by the embodiment of the invention, when the industrial control firewall is determined to have a fault, other processing function units of the industrial control firewall can continue to work, so that part of protection functions of the firewall are realized; meanwhile, a fault function unit can be determined according to the fault of the industrial control firewall, a repairing dynamic library which can be used as a substitute function unit is generated according to the fault function unit, and the repairing process of the industrial control firewall is completed by calling the repairing dynamic library. Therefore, the fault repairing device for the industrial control firewall provided by the embodiment of the invention does not need to restart the system when the firewall breaks down, and solves the technical problem of data analysis errors caused by context loss during program restart in the fault repairing process of the industrial control firewall in the prior art. Meanwhile, compared with the prior art in which a dual-computer hot standby scheme is adopted, the fault repairing device for the industrial control firewall provided by the embodiment of the invention does not need to adopt double number of devices, and reduces the repairing cost of the industrial control firewall.
As an optional implementation manner of the embodiment of the present invention, as shown in fig. 6, the fault determining module 10 further includes:
and the first judging module 11 is used for judging whether the industrial control firewall has a fault.
And the second judging module 12 is configured to judge a fault type of the industrial firewall when the industrial firewall has a fault.
And the fault determining submodule 13 is configured to determine a fault function unit in the processing function unit according to the fault of the industrial control firewall when the fault type of the industrial control firewall is a software fault.
As an optional implementation manner of the embodiment of the present invention, as shown in fig. 7, the apparatus for repairing a fault of an industrial control firewall further includes:
and an index table creating module 50, configured to create an index table according to the processing function unit of the industrial control firewall.
And a pointer generating module 60, configured to generate an index pointer of the processing function unit according to the index table.
And the protection module 70 is configured to call a corresponding processing function unit according to the index pointer to complete a protection process of the industrial control firewall.
Specifically, as shown in fig. 8, the index pointers in the created function index table may correspond to the processing function units in the industrial firewall one to one, so that the corresponding processing function units may be called for protection when the industrial firewall performs protection.
As an optional implementation manner of the embodiment of the present invention, as shown in fig. 9, the repairing the dynamic library includes: an entry function unit and a patch function unit; the repair module 30 includes:
and an entry function unit calling module 31, configured to call an entry function unit in the dynamic library according to the dynamic library command line.
And the pointer modification module 32 is configured to modify the index pointer of the failed function unit to the patch function unit in the repair dynamic library according to the entry function unit.
And the repair submodule 33 is configured to complete the protection process of the industrial control firewall according to the patch function unit instead of the fault function unit.
Specifically, as shown in fig. 10, when the original processing function unit fails, after the dynamic library is repaired by calling through the dynamic library command line, the entry function unit may modify the pointer originally pointing to the failed function unit, and modify the pointer to the patch function unit, so that the patch function unit may replace the failed function unit to complete the corresponding function.
The functional description of the fault repairing device of the industrial control firewall provided by the embodiment of the invention refers to the description of the fault repairing method of the industrial control firewall in the above embodiment in detail.
Example 3
As shown in fig. 11, the fault repairing terminal of the industrial firewall may include a processor 51 and a memory 52, where the processor 51 and the memory 52 may be connected by a bus or in another manner, and fig. 11 takes the example of connection by a bus as an example.
The processor 51 may be a Central Processing Unit (CPU). The Processor 51 may also be other general purpose processors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs) or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components, or combinations thereof.
The memory 52, which is a non-transitory computer readable storage medium, may be used to store non-transitory software programs, non-transitory computer executable programs, and modules, such as the corresponding program instructions/modules in the embodiments of the present invention. The processor 51 executes various functional applications and data processing of the processor by running non-transitory software programs, instructions and modules stored in the memory 52, that is, the method for repairing the fault of the industrial firewall in the above method embodiment is implemented.
The memory 52 may include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function; the storage data area may store data created by the processor 51, and the like. Further, the memory 52 may include high speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid state storage device. In some embodiments, the memory 52 may optionally include memory located remotely from the processor 51, and these remote memories may be connected to the processor 51 via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.
The one or more modules are stored in the memory 52 and when executed by the processor 51, perform a method of fault remediation for an industrial firewall as in the embodiment of fig. 1-4.
The details of the fault repairing terminal of the industrial firewall can be understood by referring to the corresponding descriptions and effects in the embodiments shown in fig. 1 to fig. 4, and are not described herein again.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. The storage medium may be a magnetic Disk, an optical Disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a Flash Memory (Flash Memory), a Hard Disk (Hard Disk Drive, abbreviated as HDD) or a Solid State Drive (SSD), etc.; the storage medium may also comprise a combination of memories of the kind described above.
Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the invention, and such modifications and variations fall within the scope defined by the appended claims.

Claims (10)

1. A fault repairing method for an industrial control firewall is characterized by comprising the following steps:
determining a fault function unit in the processing function units according to the fault of the industrial control firewall;
generating a repairing dynamic library according to the fault function unit;
and calling the repairing dynamic library to replace the fault function unit to complete the repairing process of the industrial control firewall.
2. The method according to claim 1, wherein determining a failure functional unit in the processing functional units according to the failure of the industrial firewall, further comprises:
judging whether the industrial control firewall has a fault or not;
when the industrial control firewall breaks down, judging the fault type of the industrial control firewall;
and when the fault type of the industrial control firewall is a software fault, determining a fault function unit according to the fault of the industrial control firewall.
3. The method for repairing a fault of an industrial control firewall according to claim 1, wherein before determining a faulty functional unit in the processing functional units according to the fault of the industrial control firewall, the method further comprises:
creating an index table according to a processing function unit of the industrial control firewall;
generating an index pointer of the processing function unit according to the index table;
and calling a corresponding processing function unit according to the index pointer to finish the protection process of the industrial control firewall.
4. The method for repairing faults of an industrial control firewall according to claim 3, wherein the repairing the dynamic library comprises: an entry function unit and a patch function unit,
calling the repairing dynamic library to replace the fault function unit to complete the repairing process of the industrial control firewall, wherein the repairing process comprises the following steps:
calling an entry function unit in the repaired dynamic library according to the dynamic library command line;
modifying the index pointer of the fault function unit to a patch function unit in the dynamic repair library according to the entry function unit;
and replacing the fault function unit with the patch function unit to complete the repair process of the industrial control firewall.
5. The utility model provides a trouble prosthetic devices of industrial control firewall which characterized in that includes:
the fault determining module is used for determining a fault function unit in the processing function units according to the fault of the industrial control firewall;
the dynamic library generating module is used for generating a repairing dynamic library according to the fault function unit;
and the repairing module is used for calling the repairing dynamic library to replace the fault function completion unit to form the repairing process of the industrial control firewall.
6. The industrial control firewall fault recovery device of claim 5, wherein the fault determination module further comprises:
the first judgment module is used for judging whether the industrial control firewall breaks down or not;
the second judging module is used for judging the fault type of the industrial control firewall when the industrial control firewall breaks down;
and the fault determining submodule is used for determining a fault function unit in the processing function unit according to the fault of the industrial control firewall when the fault type of the industrial control firewall is a software fault.
7. The industrial firewall fault recovery device of claim 5, further comprising:
the index table creating module is used for creating an index table according to the processing function unit of the industrial control firewall;
the pointer generation module is used for generating an index pointer of the processing function unit according to the index table;
and the protection module is used for calling a corresponding processing function unit according to the index pointer to finish the protection process of the industrial control firewall.
8. The industrial firewall fault recovery device of claim 7, wherein the dynamic recovery library comprises: an entry function unit and a patch function unit;
the repair module includes:
the entry function unit calling module is used for calling an entry function unit in the repaired dynamic library according to the dynamic library command line;
a pointer modification module, configured to modify the index pointer of the fault function unit to the patch function unit in the dynamic repair library according to the entry function unit;
and the repair submodule is used for completing the repair process of the industrial control firewall according to the patch function unit instead of the fault function unit.
9. A computer-readable storage medium storing computer instructions for causing a computer to perform the method for fault remediation of an industrial firewall according to any one of claims 1-4.
10. The utility model provides a fault repair terminal of industrial control firewall which characterized in that includes: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the computer instructions to perform the method for repairing a fault of an industrial firewall according to any one of claims 1 to 4.
CN201911343738.7A 2019-12-23 2019-12-23 Fault repairing method and device for industrial control firewall, storage medium and terminal Withdrawn CN111245638A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911343738.7A CN111245638A (en) 2019-12-23 2019-12-23 Fault repairing method and device for industrial control firewall, storage medium and terminal

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911343738.7A CN111245638A (en) 2019-12-23 2019-12-23 Fault repairing method and device for industrial control firewall, storage medium and terminal

Publications (1)

Publication Number Publication Date
CN111245638A true CN111245638A (en) 2020-06-05

Family

ID=70877569

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911343738.7A Withdrawn CN111245638A (en) 2019-12-23 2019-12-23 Fault repairing method and device for industrial control firewall, storage medium and terminal

Country Status (1)

Country Link
CN (1) CN111245638A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115987761A (en) * 2022-12-16 2023-04-18 北京威努特技术有限公司 Method and system for realizing transparent mode access of double-computer hot standby of industrial control firewall

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104461625A (en) * 2014-12-04 2015-03-25 上海斐讯数据通信技术有限公司 Hot patch realization method and system
US10310863B1 (en) * 2013-07-31 2019-06-04 Red Hat, Inc. Patching functions in use on a running computer system

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10310863B1 (en) * 2013-07-31 2019-06-04 Red Hat, Inc. Patching functions in use on a running computer system
CN104461625A (en) * 2014-12-04 2015-03-25 上海斐讯数据通信技术有限公司 Hot patch realization method and system

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115987761A (en) * 2022-12-16 2023-04-18 北京威努特技术有限公司 Method and system for realizing transparent mode access of double-computer hot standby of industrial control firewall

Similar Documents

Publication Publication Date Title
CN102882704B (en) Link protection method in the soft reboot escalation process of a kind of ISSU and equipment
CN110928799B (en) Software fault positioning method and device
CN110178121B (en) Database detection method and terminal thereof
CN109783014B (en) Data storage method and device
CN103139033B (en) Single main communications control bus main equipment redundancy switching method
CN104038376A (en) Method and device for managing real servers and LVS clustering system
CN110784331B (en) Consensus process recovery method and related nodes
CN113162808B (en) Storage link fault processing method and device, electronic equipment and storage medium
CN110781157B (en) Backup and recovery method and device based on NAS
CN103064759B (en) The method of data restore and device
CN115562911B (en) Virtual machine data backup method, device, system, electronic equipment and storage medium
CN105049284A (en) Linux system-based network redundancy testing method and device
CN104516796A (en) Command set based network element backup and recovery method and device
CN111124722A (en) Method, equipment and medium for isolating fault memory
CN107943617B (en) Data restoration method and device and server cluster
CN112153134A (en) Disaster tolerance drilling method, device, equipment and storage medium of disaster tolerance cloud host
CN111245638A (en) Fault repairing method and device for industrial control firewall, storage medium and terminal
CN116011026B (en) Database configuration security rapid verification method, system, equipment and storage medium
CN110502496A (en) A kind of distributed file system restorative procedure, system, terminal and storage medium
CN110086660B (en) Data processing method and device
CN110968456A (en) Method and device for processing fault disk in distributed storage system
CN115604086A (en) Monitoring alarm fault self-healing method, device, equipment, medium and program product
CN104407806A (en) Method and device for revising hard disk information of redundant array group of independent disk (RAID)
CN110928713B (en) Database service fault repairing method, related device and storage medium
CN112269693B (en) Node self-coordination method, device and computer readable storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
WW01 Invention patent application withdrawn after publication

Application publication date: 20200605

WW01 Invention patent application withdrawn after publication