Industrial control system anomaly detection method based on PCA-CNN

Abstract

The invention relates to an intrusion detection method and device for an industrial control system, computer equipment and a computer-readable storage medium. The method comprises the steps: extracting an original data set of the industrial control system from a network data set of a communication protocol of the industrial control system; obtaining a training data set and a test data set from theoriginal data set; performing feature dimension reduction on the training data set and the test data set by using a principal component analysis method to obtain a training data set subjected to feature dimension reduction and a test data set subjected to feature dimension reduction; training the training data set subjected to dimension reduction based on an intrusion detection model to obtain aclassification model; and inputting the test data set subjected to feature dimension reduction into the classification model for classification processing to obtain an intrusion detection result of the industrial control system. According to the scheme, the feature dimension reduction is carried out through a principal component analysis method, redundant information is removed, the calculated amount is reduced, and therefore the technical problem that a traditional technology industrial control system intrusion detection method has a long training time is solved.

Description

technical field [0001] The present application relates to the technical field of industrial control, in particular to an intrusion detection method for an industrial control system, an intrusion detection device for an industrial control system, computer equipment, and a computer-readable storage medium. Background technique [0002] Industrial control systems pervade electric power, chemical, petroleum and other industries, and with the integration of informatization and industrialization, the communication network inside the industrial control system is gradually interconnected with the Internet. In this way, the original closedness of the industrial control system is broken, and it is vulnerable to more attacks. An intrusion detection system can detect external attacks before they cause harm to the system and issue an alarm. The intrusion detection technology in the traditional IT network is relatively mature, but the security requirements of the industrial control syste...

AI Technical Summary

Problems solved by technology

[0004] However, the traditional method of industrial control system intrusion detection has the problem of long training time

Images