Man-in-the-middle attack detection method for networked CNC system based on Gaussian radial basis function classifier

Abstract

A man-in-the-middle attack detection method for networked CNC systems based on Gaussian radial basis function classifiers. First, from the perspective of the control level, analyze the physical sensor information of the CNC system; then, from the perspective of data-driven, consider that the industrial control system is The data in the offline situation is the normal working condition data, and use this as a reference to further analyze the working condition data in the online situation; take the deviation degree between the working condition data in the online situation and the historical working condition data as the sample data; then, from the statistics From the perspective of learning, the mean and variance are used as the feature information of the sample data; finally, from the perspective of machine learning methods, a classifier is obtained through Gaussian radial basis function support vector machine training to achieve correct classification of attacks. The invention can solve professional attacks that are difficult to detect by traditional IT security detection schemes; the theoretical framework is simple, easy to implement and has good generalization ability.

Description

technical field [0001] The invention is applied to the network intrusion detection of the industrial control system, and relates to an intrusion detection method suitable for man-in-the-middle attacks on the networked numerical control system. Background technique [0002] Since the emergence of "Made in China 2025", China has gradually transformed from a big manufacturing country to a powerful manufacturing country, and a new round of industrial revolution centered on the deep integration of informatization and industrialization is booming. As the main direction of the new round of industrial revolution, intelligent manufacturing will promote the transformation from Chinese manufacturing to Chinese creation, from Chinese speed to Chinese quality, and from Chinese products to Chinese brands. [0003] In the modern manufacturing industry, the application of NC technology (NC—Numerical Control) has become increasingly widespread. The superiority of the NC system is reflected i...

AI Technical Summary

Problems solved by technology

In addition, due to the lack of network management, users who access the communication network will become the key target of network hackers, and directly steal confidential information by posing as users

[0005] At present, the security protection for industrial control systems is mostly focused on traditional IT security solutions, such as system upgrades, virus killing, installation of industrial firewalls, etc., but most of these solutions have a certain time lag and have not formed a complete set safety management system

In addition, there are essential differences between industrial control systems and information systems in terms of performance requirements, management requirements, and physical characteristics. Once criminals use the characteristics of industrial control systems to launch corresponding attacks, they can bypass existing IT security solutions and cause unsafe economic loss recovered

Images