Method for obscuring a control device's network presence by dynamically changing the device's network addresses using a cryptography-based pattern

摘要

A network security system comprises a first component that generates an address for identifying a communicating device on a network. A second component receives the address generated by the first component and facilitates transitioning from an existent address to the generated address. Such transitioning is effectuated in order to protect the network against attack while providing seamless communications with respect to the communicating device.

主权项

1. An industrial device, comprising:
a network port comprising a first network address, wherein the network port is configured to receive a first instruction that comprises a second network address and first timing information defining a time at which the industrial device is to transition to the second network address, wherein the second network address has been ensured to not having been previously assigned to the network port, and the first instruction is received from an address authority device; a first timing component configured to initiate a first count-down based on the time defined by the first timing information, and replace the first network address with the second network address in response to expiration of the first count-down, wherein the first timing component is further configured to synchronize with a second timing component associated with the address authority device.