Networked numerical control system man-in-the-middle attack detection method based on Gaussian radial basis function classifier

Abstract

The invention discloses a networked numerical control system man-in-the-middle attack detection method based on a Gaussian radial basis function classifier, and the method comprises the steps: firstly, analyzing the physical sensor information of a numerical control system from the perspective of a control level; then, starting from the perspective of data driving, considering the data of the industrial control system under the offline condition as normal working condition data, and further analyzing the working condition data under the online condition by taking the normal working condition data as a reference; taking the deviation degree between the working condition data and the historical working condition data under the online condition as sample data; then, starting from the perspective of statistics, taking the mean value and the variance as feature information of the sample data; and finally, starting from the perspective of a machine learning method, training a support vectormachine based on a Gaussian radial basis function to obtain a classifier, and achieving correct classification of attacks. The method can solve the problem that a traditional IT security detection scheme is difficult to detect professional attacks; and the theoretical framework is simple, easy to implement and good in generalization capability.

Description

technical field [0001] The invention is applied to the network intrusion detection of the industrial control system, and relates to an intrusion detection method suitable for man-in-the-middle attacks on the networked numerical control system. Background technique [0002] Since the emergence of "Made in China 2025", China has gradually transformed from a big manufacturing country to a powerful manufacturing country, and a new round of industrial revolution centered on the deep integration of informatization and industrialization is booming. As the main direction of the new round of industrial revolution, intelligent manufacturing will promote the transformation from Chinese manufacturing to Chinese creation, from Chinese speed to Chinese quality, and from Chinese products to Chinese brands. [0003] In the modern manufacturing industry, the application of NC technology (NC—Numerical Control) has become increasingly widespread. The superiority of the NC system is reflected i...

AI Technical Summary

Problems solved by technology

In addition, due to the lack of network management, users who access the communication network will become the key target of network hackers, and directly steal confidential information by posing as users

[0005] At present, the security protection for industrial control systems is mostly focused on traditional IT security solutions, such as system upgrades, virus killing, installation of industrial firewalls, etc., but most of these solutions have a certain time lag and have not formed a complete set safety management system

In addition, there are essential differences between industrial control systems and information systems in terms of performance requirements, management requirements, and physical characteristics. Once criminals use the characteristics of industrial control systems to launch corresponding attacks, they can bypass existing IT security solutions and cause unsafe economic loss recovered

Images