Design and implementation of industrial firewall for Modbus/TCP

For the fragile security status and the growing threat of attack on industrial control systems, it is particularly important to strengthen the technology of security protection. After a detailed study of the characteristics of industrial control systems, this paper put forward design scheme of industrial firewall based on Modbus/TCP protocol, combining "white list" security policies with deep packet inspection technology, and realizing on the Linux platform. The experimental results show that the firewall can effectively intercept illegal data stream and ensure the normal operation of the industrial control system.