Timing model generation method and device for industrial control instructions and its detection method and device

Abstract

The invention discloses a method and device for generating a timing model of industrial control instructions, and a detection method and device thereof. The method for generating the timing model of the industrial control instructions comprises the following steps of acquiring a plurality of industrial control instruction data that comprise the industrial control instructions and an industrial control instruction arrival time; counting instruction sequences headed by each industrial control instruction according to a preset screening condition until the length of the instruction sequences reaches a first preset threshold or there is no instruction sequences headed by the industrial control instructions, and generating an instruction sequence set; determining the step size between the respective industrial control instructions in the instruction sequences according to the industrial control instruction arrival time; and constructing an industrial control instruction timing model according to the instruction sequence set and the step size. When the industrial control instruction timing model is used to perform an abnormality check on the industrial control instruction sequences, abnormal industrial control commands can be found, and industrial control commands with an abnormal step size can be found, thereby more effectively finding abnormal industrial control command sequences,and preventing employees in the industrial control system from faulty operations, malicious operations, etc.

Description

technical field [0001] The invention relates to the technical field of industrial control network security, in particular to a method for generating a sequence model of an industrial control instruction and an abnormal detection method for an industrial control instruction. Background technique [0002] Industrial control system (Industrial Control System, ICS) refers to the industrial automation control system, which is mainly realized by the combination of electronics, machinery, and computer software. By using computer technology, microelectronics technology, and electrical means, the production and manufacturing process of the factory can be made more efficient. Automation, efficiency, precision, controllability and visibility. Industrial control systems are generally used in rail transit, power plants, power grids, intelligent manufacturing, petroleum and petrochemical industries, etc. Many of these systems are related to the national economy and people's livelihood, an...

AI Technical Summary

Problems solved by technology

[0005] In view of this, the embodiment of the present invention provides a timing model generation method and device for industrial control instructions and its detection method and device to solve the misoperation and malicious operation of employees in the industrial control system by existing industrial firewalls and audit products. unavoidable problems

Images