Industrial control service behavior identification method and device, electronic equipment and readable medium

The invention provides an industrial control service behavior identification method and device, electronic equipment and a readable medium, and the method comprises the steps: obtaining traffic data, and extracting a first data package set from the traffic data; analyzing the number of load bytes, and determining a plurality of target load bytes and a second data packet set corresponding to the target load bytes; sequentially traversing a plurality of target load byte numbers, aiming at each target load byte number, determining a communication IP pair type of a second data packet set of which the number is greater than a threshold value, extracting a load content set from the current second data packet set according to the communication IP pair type, carrying out similarity verification on the extracted load content set, and if the verification is similar, judging whether the load content set is similar or not; and if yes, marking the load content corresponding to the target load byte number as the industrial