Efficient food processing remote control system intrusion detection method

Abstract

The invention discloses an efficient intrusion detection method for a food processing remote control system. The method mainly comprises the following steps: establishing a food processing remote control network topology model, layering a food processing remote control system, and respectively carrying out host intrusion detection and network intrusion detection; false alarms are effectively filtered through a feature matching method, and the filtered abnormal behaviors are detected again, so that the detection efficiency is improved; whether access is an intrusion behavior or not is judged through coordination work among multiple agents, and host intrusion detection and self-learning are carried out; and automatically mining a network intrusion rule by using a clustering method and an association rule, and carrying out network intrusion detection to complete food processing remote control intrusion detection. The method has strong adaptability and robustness, can automatically extract the matching rule, realizes unsupervised operation, reduces the burden of a host administrator, realizes multi-agent coordinated operation, increases the intrusion difficulty, meets the intrusion detection of large-scale traffic, and improves the intelligence of the system.

Description

[0001] The present invention is a divisional application of an invention patent with the application number "201811168407X" of "a method for intrusion detection of a remote control system for food processing". technical field [0002] The invention relates to the fields of network transmission, data mining and communication agency, in particular to an efficient intrusion detection method for a food processing remote control system. Background technique [0003] As the food processing industry becomes more and more intelligent, many processing processes can be remotely controlled through the network, but the loopholes in the system pose a threat to network security. The manual participation of the rules in the existing intrusion detection system is too high, which increases the maintenance cost. The large number of host agents leads to the decline of information processing performance, which cannot cope with large-scale intrusion behaviors. The system has poor adaptability, lo...

AI Technical Summary

Problems solved by technology

The manual participation of the rules in the existing intrusion detection system is too high, which increases the maintenance cost. The large number of host agents leads to the decline of information processing performance, which cannot cope with large-scale intrusion behaviors. The system has poor adaptability, low detection rate, and false positives. Happening

Images