通用工业协议(CIP)形式化的安全分析(前期概念的梳理)

1、CIP的概念的梳理

  CIP是为开放的现场总线DeviceNet ControlNet   EtherNet/IP 网络提供公共的应用层和设备描述, CIP是基于对象的协议,使用生产者/消费者模型,分为显式报文和隐式报文两种情况。使用的共同的配置文件格式是EDS(电子数据表) ,同时CIP独立于物理层和数据链路层

2、CIP Safety 的概念上的错误纠正

       一直以来 国内较早的文献资料上一直将CIP Saftey称为协议。这是没有理清协议的概念和混淆了CIP 协议。CIP Safety 是一种多种方法结合的安全策略,来保CIP协议的通信的安全。

 3、CIP通用工业协议的介绍

    CIP定义了满足各种工业协议应用的要求的服务和行规,CIP与CAN的结合是DeviceNet,同样的CIP与TCP/IP的结合形成了EtherNet/IP,那么CIP Safety作为应用层的最新的扩展, CIPSafety与CAN的结合就有了 DeviceNet Safety , 同样CIP Safety 与TCP/IP  Ethernet就有了 EtherNet/IP Safety      ,

  那么是不是我们就可以简单的说 CIP Safety就是一个协议 ,NO  ,我们不能这样说, 因为完全不符合协议的定义。 查阅罗克韦尔公司的文件,最CIP和EtherNet/IP定义的安全性的解释性的文献和相关的资料,都是对CIP或者对EtherNet/IP 如何实现安全通信的一种安全保障的措施。更直接的就是说使用TLS协议或者SSL协议来保证通信的安全。 那么CIP Safety 的核心就是TLS的安全的保证技术,但是不光光是TLS的即使应用中CIP中的, CIP Safety的安全措施除了 TLS的安全

 

 

 

 

Contents 3-1 Introduction........................................................................................................................................................ 3 3-2 Scope.................................................................................................................................................................. 3 3-3 CIP packets over TCP/IP ................................................................................................................................... 3 3-3.1 Unconnected messages .............................................................................................................................. 3 3-3.2 CIP transport class 0 and class 1 connections ............................................................................................ 5 3-3.2.1 CIP transport class 0 and class 1 packets ............................................................................................... 5 3-3.2.2 Behavior of class 0 and class 1 connections (informative) .................................................................... 5 3-3.3 CIP Transport class 2 and class 3 connections ........................................................................................... 6 3-3.4 CIP Transport classes 4 through 6 ............................................................................................................. 6 3-4 Connection Manager object ............................................................................................................................... 6 3-4.1 Connection parameters............................................................................................................................... 6 3-4.2 Connection type ......................................................................................................................................... 7 3-4.3 Priority ....................................................................................................................................................... 7 3-4.4 Trigger Type .............................................................................................................................................. 7 3-4.5 Connection size .......................................................................................................................................... 7 3-4.6 Connection request time-out ...................................................................................................................... 7 3-4.7 Connection path ......................................................................................................................................... 7 3-4.7.1 Network connection ID .......................................................................................................................... 8 3-4.8 Forward_open for CIP transport class 2 and class 3 connections ............................................................ 11 3-4.9 Forward_open for CIP transport class 0 and class 1 connections ............................................................ 11 3-4.9.1 General ................................................................................................................................................. 11 3-4.9.2 Mapping connections to IP multicast addresses ................................................................................... 11 3-4.9.3 Completing the multicast connection (informative) ............................................................................. 12 3-5 CIP transport class 0 and class 1 connected data ............................................................................................. 12 3-5.1 UDP datagrams ........................................................................................................................................ 12 3-5.2 CIP transport class 0 and class 1 packet ordering .................................................................................... 12 3-5.3 Screening incoming connected data ......................................................................................................... 13 3-6 IP multicast scoping and address allocation..................................................................................................... 13 3-6.1 Background (informative) ........................................................................................................................ 13 3-6.1.1 General ................................................................................................................................................. 13 3-6.1.2 Current scoping practices ..................................................................................................................... 14 3-6.1.3 Current address allocation practices..................................................................................................... 14 3-6.1.4 Evolving Internet standards.................................................................................................................. 14 3-6.2 Interim scoping strategy ........................................................................................................................... 15 3-6.3 Interim allocation strategy........................................................................................................................ 15
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

明月嫣然-疏桐-暖阳

你的鼓励是我开源的动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值