公开(公告)号：US20130081130A1

公开(公告)日：2013-03-28

申请号：US13628964

申请日：2012-09-27

申请人： Fisher-Rosemount Systems, Inc., a Delaware Cor

发明人： Robert Kent Huba ,  Duncan Schleiss ,  Gary Keith Law

IPC分类号： G06F21/00 ,  G06F15/173

CPC分类号： H04L67/16 ,  H04L63/0236 ,  H04L67/125

摘要： Methods, apparatus, and articles of manufacture to provide firewalls for process control systems are disclosed. An example method includes analyzing a network communication to identify a first service, an address associated with the first service within a secured portion of a network, and a subset of ports used by the first service, the network communication originating from within the secured portion of the network and to be transmitted to a destination outside of the secured portion of the network, and storing an identifier of the first service, the address, and the subset of the ports when the network communication includes the identifier, the address, and the subset of the ports.

摘要翻译： 公开了为过程控制系统提供防火墙的方法，装置和制品。 示例性方法包括分析网络通信以识别第一服务，与网络的安全部分内的第一服务相关联的地址以及由第一服务使用的端口的子集，网络通信源自于 所述网络并且被发送到所述网络的所述安全部分之外的目的地，并且当所述网络通信包括所述标识符，所述地址和所述子集时，存储所述第一服务，所述地址和所述端口的子集的标识符 的港口。