Parallel detection method and system for abnormal communication behavior based on ocsvm model under hj212 protocol

A technology of HJ212, 1.HJ212 is applied in the field of parallel detection of abnormal communication behavior, which can solve the problems of low detection rate and abnormal detection of abnormal communication behavior, and achieve the effects of improving efficiency, improving abnormal detection rate, and improving detection speed.

Active Publication Date: 2021-11-23
湖南匡安网络技术有限公司
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In view of the above defects or improvement needs of the prior art, the present invention provides a parallel detection method and system for abnormal communication behaviors based on the OCSVM model under the HJ212 protocol. and technical issues with low detection rates

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Parallel detection method and system for abnormal communication behavior based on ocsvm model under hj212 protocol
  • Parallel detection method and system for abnormal communication behavior based on ocsvm model under hj212 protocol
  • Parallel detection method and system for abnormal communication behavior based on ocsvm model under hj212 protocol

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0039] In order to make the object, technical solution and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the examples. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not constitute a conflict with each other.

[0040] The specific idea of ​​the present invention is to analyze the data packets of the HJ212 protocol, and select the command code sequence as the research object. The correlation between the data packets, using the One-Class Support Vector Machine (OCSVM) algorithm to model the abnormal data packet command coding sequence and the normal data packet command coding sequence respectively, and construct a dual-contour mo...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention discloses a method and system for abnormal parallel detection of communication behavior based on the OCSVM model under the HJ212 protocol, which specifically includes: (1) obtaining a connection including a plurality of HJ212 protocol communication data packets from an industrial control network, and for each HJ212 protocol communication data packet Analyze to obtain the corresponding command codes, and sort the multiple command codes corresponding to all HJ212 protocol communication data packets according to the transmission time sequence of all HJ212 protocol communication data packets included in the connection, thus forming the Connect the corresponding command code sequence; (2) input the command code sequence corresponding to the connection into the trained HJ212 protocol anomaly detection model to obtain the detection result of the connection. The invention can solve the technical problem that the abnormal communication behavior under the HJ212 protocol cannot be detected and the detection rate is low in the existing method.

Description

technical field [0001] The invention belongs to the field of industrial control network information security, and more specifically relates to a method and system for parallel detection of abnormal communication behavior based on the OCSVM model under the HJ212 protocol. Background technique [0002] The HJ212 protocol is a communication protocol applicable to the pollutant online monitoring (monitoring) system and the pollutant discharge process (working condition) automatic monitoring system. The monitoring system sends the pollutant monitoring data collected by the remote monitoring instrument to the The monitoring center has large communication data and good real-time performance. [0003] Since the message structure and data format of the HJ 212 protocol are public, without sufficient protection measures, the data transmitted by the monitoring system is vulnerable to network attacks, which threatens the security of the monitoring system. With the development of informa...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/24H04L12/26H04L29/08G16Y30/10
CPCG16Y30/10H04L41/145H04L43/0811H04L67/12
Inventor 李肯立付鹏磊杨志邦余思洋吕婷胡庆丰唐卓刘楚波阳王东
Owner 湖南匡安网络技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap