Communication behavior abnormity parallel detection method and system based on OCSVM model under HJ212 protocol

A HJ212, 1. HJ212 technology, applied in the field of parallel detection of abnormal communication behavior, can solve the problems of abnormal detection of communication behavior and low detection rate, and achieve the effect of improving abnormal detection rate, efficiency and detection speed

Active Publication Date: 2021-06-04
湖南匡安网络技术有限公司
View PDF3 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In view of the above defects or improvement needs of the prior art, the present invention provides a parallel detection method and system for abnormal communication behaviors based on the OCSVM model under the HJ212 protocol. and technical issues with low detection rates

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Communication behavior abnormity parallel detection method and system based on OCSVM model under HJ212 protocol
  • Communication behavior abnormity parallel detection method and system based on OCSVM model under HJ212 protocol
  • Communication behavior abnormity parallel detection method and system based on OCSVM model under HJ212 protocol

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0039] In order to make the object, technical solution and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the examples. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not constitute a conflict with each other.

[0040] The specific idea of ​​the present invention is to analyze the data packets of the HJ212 protocol, and select the command code sequence as the research object. The correlation between the data packets, using the One-Class Support Vector Machine (OCSVM) algorithm to model the abnormal data packet command coding sequence and the normal data packet command coding sequence respectively, and construct a dual-contour mo...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a communication behavior abnormity parallel detection method and system based on an OCSVM model under an HJ212 protocol. The method specifically comprises the steps: (1) obtaining a connection comprising a plurality of HJ212 protocol communication data packets from an industrial control network, carrying out the analysis of each HJ212 protocol communication data packet, obtaining a corresponding command code, and transmitting the command code to an industrial control network; sorting a plurality of command codes corresponding to all the HJ212 protocol communication data packets according to the transmission time sequence of all the HJ212 protocol communication data packets included in the connection so as to form a command code sequence corresponding to the connection; and (2) inputting a command coding sequence corresponding to the connection into the trained HJ212 protocol anomaly detection model to obtain a detection result of the connection. According to the method and the device, the technical problems that the communication behavior abnormity under the HJ212 protocol cannot be detected and the detection rate is relatively low in the existing method can be solved.

Description

technical field [0001] The invention belongs to the field of industrial control network information security, and more specifically relates to a method and system for parallel detection of abnormal communication behavior based on the OCSVM model under the HJ212 protocol. Background technique [0002] The HJ212 protocol is a communication protocol applicable to the pollutant online monitoring (monitoring) system and the pollutant discharge process (working condition) automatic monitoring system. The monitoring system sends the pollutant monitoring data collected by the remote monitoring instrument to the The monitoring center has large communication data and good real-time performance. [0003] Since the message structure and data format of the HJ 212 protocol are public, without sufficient protection measures, the data transmitted by the monitoring system is vulnerable to network attacks, which threatens the security of the monitoring system. With the development of informa...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/24H04L12/26H04L29/08G16Y30/10
CPCG16Y30/10H04L41/145H04L43/0811H04L67/12
Inventor 李肯立付鹏磊杨志邦余思洋吕婷胡庆丰唐卓刘楚波阳王东
Owner 湖南匡安网络技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap