A method and system for abnormal detection of industrial control equipment
A technology for industrial control equipment and anomaly detection, which is applied in the field of data processing, can solve problems such as poor network attack detection capabilities, and achieve the effect of improving network attack detection capabilities and efficiency
Active Publication Date: 2021-11-19
STATE GRID E COMMERCE CO LTD +2
View PDF4 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0004] In view of this, the embodiment of the present invention provides a method and system for abnormality detection of industrial control equipment to solve the problems of poor network attack detection ability existing in the existing abnormality detection method
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0060] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.
[0061] In this application, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes none. other elements specifically listed, or also include elements inherent in such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "com...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The present invention provides a method and system for abnormal detection of industrial control equipment, which extracts the attribute characteristics of the data packets to be processed in the sequence of data packets to be processed; judges whether the basic attributes of the data packets to be processed conform to the preset rules; if not, determines the characteristics of the industrial control equipment The interaction behavior is abnormal; if so, determine the interaction mode of the data packet sequence to be processed; judge whether the interaction mode of the data packet sequence to be processed is an interaction mode in the interaction mode set; if not, determine that the interaction behavior of the industrial control equipment is abnormal; Process the subsequence corresponding to each interaction mode in the data packet sequence, analyze the uplink data value of the uplink data packet, and determine the model prediction value of the uplink data value; if the difference between the uplink data value and the model prediction value is not within the preset range , determine that the interactive behavior of industrial control equipment is abnormal; record the abnormal behavior on the blockchain. It judges whether the interactive behavior is abnormal at multiple levels, and improves the network attack detection capability and efficiency of ICS.
Description
technical field [0001] The invention relates to the technical field of data processing, in particular to a method and system for detecting abnormality of industrial control equipment. Background technique [0002] Industrial control systems (Industrial Control Systems, ICS) are usually isolated from other networks, but with the development of communication technology, ICS is becoming more and more open, which leads to more and more prominent network security risks of ICS, so anomaly detection for ICS is required. [0003] The current anomaly detection method for ICS is mainly based on the legality detection of industrial control protocol fields, but the aforementioned anomaly detection method cannot detect abnormal behaviors such as internal attacks, attacks with no change in communication traffic characteristics, and attacks with tampering measurement data. Poor, cannot guarantee the network security of ICS. Contents of the invention [0004] In view of this, the embodim...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L29/08G05B23/02
CPCG05B23/02H04L63/1416H04L63/1425H04L67/12
Inventor 王栋杨珂王合建龚政玄佳兴薛真赵丽花陈智雨王俊生
Owner STATE GRID E COMMERCE CO LTD