System and method of utilizing network security devices for industrial device protection and control
A new network security device/appliance is proposed to not only protect, but also to control and operate an industrial IoT device. Specifically, the network security device is configured to detect and block cyber attacks such as viruses, hacking attempts, and other types of cyber threats launched from an outside network against the industrial IoT device based on a set of configurable rules. In addition, the network security device is further configured to control and operate the industrial IoT device remotely in response to the cyber attacks by issuing and communicating certain instructions/command to the industrial IoT device. Besides accepting and executing control command from the network security device, the industrial IoT device is also configured to send a request to the network security device to make certain adjustments to the rules concerning network traffic directed to the industrial IoT device.
1. A system to support utilizing network security devices for industrial IoT device protection and control, comprising:
a network security device configured to
detect and block a cyber attack launched from an outside network against a network-enabled industrial IoT device based on a set of configurable rules;
issue and communicate a control command to the network-enabled industrial IoT device following a communication protocol to control and perform an operation of the network-enabled industrial IoT device remotely in response to the detected cyber attack;
adjust one or more of the configurable rules concerning network traffic directed to the network-enabled industrial IoT device in response to a request from the network-enabled industrial IoT device;
said network-enabled industrial IoT device configured to
accept and execute the control command from the network security device to perform the operation;
communicate said request to the network security device following the communication protocol to make certain adjustment to said one or more of the configurable rules concerning network traffic directed to the network-enabled industrial IoT device.
2. The system of claim 1 , wherein:
the communication protocol is a REpresentational State Transfer (REST), a HTTP or a HTTPS protocol.
3. The system of claim 1 , wherein:
the communication protocol is a proprietary network communication protocol.
4. The system of claim 1 , wherein:
the cyber attack is one of virus, a hacking attempt, a phishing attack.
5. The system of claim 1 , wherein:
the command issued by the network security device and the operations performed by the industrial IoT device as a result of executing the command are pre-defined, configured, and customized by the network security device and the industrial IoT device.
6. The system of claim 1 , wherein:
the network security device is configured to communicate the command to the network-enabled industrial IoT device by invoking an Application Program Interface (API) of the network-enabled industrial IoT device.
7. The system of claim 1 , wherein:
the one or more of the configurable rules include a block rule in place by default on the network security device to block all unauthorized access attempt to the industrial IoT device.
8. The system of claim 7 , wherein:
the one or more of the configurable rules further include an unblock rule on the network security device to allow certain network traffic to the industrial IoT device under certain circumstance and/or event.
9. The system of claim 8 , wherein:
the network security device is configured to
activate the unblock rule to allow network traffic directed to the network-enabled industrial IoT device during maintenance of the network-enabled industrial IoT device;
deactivate the unblock rule to block the network traffic directed to the network-enabled industrial IoT device after the maintenance of the network-enabled industrial IoT device.
10. A computer-implemented method to support utilizing network security devices for industrial IoT device protection and control, comprising:
detecting and blocking a cyber attack launched from an outside network against a network-enabled industrial IoT device based on a set of configurable rules;
issuing and communicating a control command to the network-enabled industrial IoT device following a communication protocol to control and perform an operation of the network-enabled industrial IoT device remotely in response to the detected cyber attack;
accepting and executing the control command from the network security device to perform the operation on the network-enabled industrial IoT device;
communicating said request to the network security device following the communication protocol to make certain adjustment to said one or more of the configurable rules concerning network traffic directed to the network-enabled industrial IoT device;
adjusting one or more of the configurable rules concerning network traffic directed to the network-enabled industrial IoT device in response to a request from the network-enabled industrial IoT device.
11. The method of claim 10 , further comprising:
pre-defining, configuring, and customizing the command issued by the network security device and the operations performed by the industrial IoT device as a result of executing the command by the network security device and the industrial IoT device.
12. The method of claim 10 , further comprising:
communicating the command to the network-enabled industrial IoT device by invoking an Application Program Interface (API) of the network-enabled industrial IoT device.
13. The method of claim 10 , further comprising:
activating an unblock rule to allow network traffic directed to the network-enabled industrial IoT device during a certain event.
14. The method of claim 13 , further comprising:
deactivating the unblock rule to block the network traffic directed to the network-enabled industrial IoT device after the event is over.
15. The method of claim 10 , further comprising:
deactivating a block rule, which blocks all unauthorized access attempt to the industrial IoT device by default, to allow the traffic to be processed by a following active unblock rule during a certain event.
16. The method of claim 15 , further comprising:
reactivating the block rule to block the network traffic directed to the network-enabled industrial IoT device after the event is over.