|
| 摘要: |
| 嵌入式Linux技术具有稳定与经济的特点,比双主机隔离方案安全高效.PowerPC体系开发板又广泛用于网络安全设备,因此,选择GE850EH开发板,运用嵌入式Linux的方法来开发新型协议隔离设备,是实现电力系统协议隔离的最优选择.通过研究GE850EH开发板的寄存器配置与Bootloader移植.创建Linux文件系统,引导操作系统,成功地实现了一个高效且安全可靠的电力协议隔离设备.而且,在网络数据的捕获方法上,使用了目前最先进的libnet和libpcap函数库,在应用层上完全控制了基于TCP/IP协议的数据包的收发过程.最后,讨论了协议隔离与网闸技术的结合与发展前景. |
| 关键词: 物理隔离 嵌入式Linux 网络安全 电力系统 |
| DOI： |
| 分类号:TM76 |
| 基金项目: |
|
| Implementation of embedded protocol isolation equipment based on PowerPC |
|
ZHOU Liang LIU Kaipei LI June
|
| Abstract: |
| Since the stable and economic embedded Linux technology is more secure and efficient than the dual -host isolation scheme and the development boards based on PowerPC architecture are widely used in network security equipment, the development board GE850EH running embedded Linux is thus selected to realize protocol isolation in power system. The register configuration and Bootloader modification of GE850EH are illustrated. Methods of booting kernel and Linux file system under embedded environments are researched. Libnet and libpcap are applied in network data capture and the TCP / IP based packages transmission over Ethernet is totally controlled at application layer. Gap isolation technologies are discussed,which may be combined with protocol isolation technologies for a bright future. |
| Key words: physical isolation,embedded Linux,network security,power system |
