An Intrusion Detection System for PLC Control System

A technology of intrusion detection system and control system, applied in the field of PLC control system, can solve the problems of lack of protection scheme of PLC control system, etc., and achieve the effects of low power consumption, easy upgrade and easy maintenance

CN110320890BActive Publication Date: 2021-08-03UNIV OF SCI & TECH BEIJING
16 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2021-08-03

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides an intrusion detection system aimed at a PLC control system, including an operation data collection module, a data-driven intrusion detection module, a network data collection module, a network communication protocol intrusion detection module, an intrusion response output module, and a monitoring server; by capturing and analyzing Network data packets, analyzing network data feature influence factors, extracting network data feature values, constructing normal network communication protocol models, and realizing network communication protocol intrusion detection. At the same time, through the collection of on-site operation data, a steady-state operation prediction model is constructed, and the actual output of the control system and the output predicted by the model are evaluated for residuals to realize data-driven intrusion detection. When an intrusion is found, the controller is braked and an alarm is given. The invention is applicable to the technical field of industrial control system information security, and can effectively realize the intrusion detection of the PLC control system without intrusion into the industrial control system, thereby improving the security guarantee capability of the industrial control system.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the technical field of PLC control systems, in particular to an intrusion detection system for PLC control systems. Background technique

[0002] In recent years, with the in-depth integration of industrialization and informatization, the field of cyberspace security is no longer what it used to be. Industrial control systems have become the main battlefield in cyberspace. PLC control systems have been widely used in industrial automation, so exposure to There are more and more PLC devices on the Internet. Due to the security flaws originally designed by PLC, the openness of communication and the increasingly discovered loopholes, the PLC control system has become no longer mysterious and independent, and intruders can better investigate the PLC control system. security structure to achieve intrusion. In addition, there are more and more intrusion and attack tools open on the Internet, which lowers the threshold for people to ...

Examples

Embodiment Construction

[0045] In order to make the technical problems, technical solutions and advantages to be solved by the present invention clearer, the following will describe in detail with reference to the drawings and specific embodiments.

[0046] see Figure 1 to Figure 5 , this embodiment aims at the problem that the existing technology lacks a protection scheme for the PLC control system, provides an intrusion detection system for the PLC control system, realizes the protection of the PLC control system, improves the security of the PLC control system, and ensures that the PLC control system safe operation.

[0047] The application scenarios of the intrusion detection system in this embodiment are as follows: figure 1As shown, it is applied to the industrial network composed of PLC control system, console and industrial server. In a PLC control system operation scenario, the variables fed back by the controller PLC and the sensor form a closed-loop control to maintain the stability of t...