An Intrusion Detection System for PLC Control System

Abstract

The invention provides an intrusion detection system aimed at a PLC control system, including an operation data collection module, a data-driven intrusion detection module, a network data collection module, a network communication protocol intrusion detection module, an intrusion response output module, and a monitoring server; by capturing and analyzing Network data packets, analyzing network data feature influence factors, extracting network data feature values, constructing normal network communication protocol models, and realizing network communication protocol intrusion detection. At the same time, through the collection of on-site operation data, a steady-state operation prediction model is constructed, and the actual output of the control system and the output predicted by the model are evaluated for residuals to realize data-driven intrusion detection. When an intrusion is found, the controller is braked and an alarm is given. The invention is applicable to the technical field of industrial control system information security, and can effectively realize the intrusion detection of the PLC control system without intrusion into the industrial control system, thereby improving the security guarantee capability of the industrial control system.

Description

technical field [0001] The invention relates to the technical field of PLC control systems, in particular to an intrusion detection system for PLC control systems. Background technique [0002] In recent years, with the in-depth integration of industrialization and informatization, the field of cyberspace security is no longer what it used to be. Industrial control systems have become the main battlefield in cyberspace. PLC control systems have been widely used in industrial automation, so exposure to There are more and more PLC devices on the Internet. Due to the security flaws originally designed by PLC, the openness of communication and the increasingly discovered loopholes, the PLC control system has become no longer mysterious and independent, and intruders can better investigate the PLC control system. security structure to achieve intrusion. In addition, there are more and more intrusion and attack tools open on the Internet, which lowers the threshold for people to ...

AI Technical Summary

Problems solved by technology

[0004] The technical problem to be solved by the present invention is to provide an intrusion detection system for PLC control systems, solve the problem of lack of protection schemes for PLC control systems in the prior art, realize the protection of PLC control systems, and improve the safety of PLC control systems. Guarantee the safe operation of the PLC control system

Images