Unlock instant, AI-driven research and patent intelligence for your innovation.

Abnormal packet detection device and method

A detection device and packet technology, which can be used in security communication devices, digital transmission systems, electrical components, etc., and can solve the problem that intrusion detection systems cannot be reversed.

Pending Publication Date: 2022-05-17
INSTITUTE FOR INFORMATION INDUSTRY
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Conventional intrusion detection systems cannot reverse process when encountering unknown industrial control protocols, resulting in many misjudgments

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Abnormal packet detection device and method
  • Abnormal packet detection device and method
  • Abnormal packet detection device and method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0037] The detailed features and advantages of the present invention will be described in detail below in specific embodiments, which are sufficient for anyone skilled in the art to explain the abnormal packet detection device and method provided by the present invention through the embodiments. However, these embodiments are not intended to limit the present invention to be implemented in any environment, application or manner as described in these embodiments. Therefore, the description of the following embodiments is only for the purpose of illustrating the present invention, rather than limiting the scope of the present invention. It should be understood that in the following embodiments and drawings, elements not directly related to the present invention have been omitted and not shown. In addition, the dimensions of the components and the dimensional ratios among the components in the drawings are only for illustration and description, and are not intended to limit the s...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to an abnormal packet detection device and method. The abnormal packet detection device stores a white list corresponding to an agreement port, and the white list comprises at least one legal packet record. Each legal packet record comprises a legal packet length, a legal source address and a legal change position set and corresponds to a reference packet. The abnormal packet detection device judges that the current packet length and the current source address of a packet to be analyzed are respectively the same as the legal packet length and the source address contained in a reference packet record in the at least one legal packet record; the packet to be analyzed is compared with a reference packet corresponding to the reference packet record to confirm the current change position of the packet to be analyzed, and the current change position is compared with a legal change position set corresponding to the reference packet record to generate a detection result.

Description

technical field [0001] The invention relates to an abnormal packet detection device and method. Specifically, the present invention relates to a device and method capable of individually establishing a white list for different communication protocols and performing abnormal packet detection accordingly. Background technique [0002] Now is the era of the Internet of Everything, whether it is the country's infrastructure or the operating equipment of the manufacturing industry, they are all connected to the Internet, and are managed and controlled through the industrial control system. If the industrial control environment (that is, the network environment where the industrial control system and its controlled infrastructure or / and operating equipment are located) suffers from information security attacks (such as the invasion of malware), it will cause innumerable or even irreparable losses . Therefore, an intrusion detection system (Intrusion Detection System) must be ins...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/40
CPCH04L63/1416H04L63/0236H04L43/18H04L43/028H04L43/08H04L63/1425H04L43/50H04L43/062H04L43/04
Inventor 邹育庭黄鼎杰林志达杨明轩李美玲马永发毛志方
Owner INSTITUTE FOR INFORMATION INDUSTRY