Unlock instant, AI-driven research and patent intelligence for your innovation.

Intrusion detection and positioning method and system based on control invariant modeling

A technology of intrusion detection and positioning method, which is applied in the direction of transmission system, digital transmission system, security communication device, etc. It can solve problems such as poor interpretation, no attack behavior, strong data dependence, etc., and achieve the goal of reducing construction difficulty and improving accuracy Effect

Pending Publication Date: 2022-07-22
ZHEJIANG UNIV
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Existing industrial control system intrusion detection methods have many problems such as no ability to detect unidentified attack behaviors, strong dependence on data, poor interpretation, and affecting the normal operation of industrial control systems.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Intrusion detection and positioning method and system based on control invariant modeling
  • Intrusion detection and positioning method and system based on control invariant modeling
  • Intrusion detection and positioning method and system based on control invariant modeling

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0051] In order to better understand the technical solutions of the present application, the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0052] It should be clear that the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0053] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. As used in the embodiments of this application and the appended claims, the singular forms "a," "the," and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise.

[0054] The invention provi...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses an intrusion detection and positioning method and system based on control invariant modeling, and the method comprises the steps: recognizing a set value variable, a sensor value variable and a control command value variable in an industrial control system as control variable relation graph nodes through the historical record values of a data collection and monitoring system in the industrial control system; on the basis, the connection relation between the nodes is identified, the weight of a connection edge is calculated, and a control variable relation graph is automatically constructed. Furthermore, the control variable relation graph topology and the connection edge weight thereof are used as control invariants of the industrial control system to carry out online intrusion detection and attack positioning. The method is non-invasive in the stages of historical data acquisition, control invariant construction, online intrusion detection and positioning and the like of the target industrial control system, and normal and stable operation of the industrial control system is not affected.

Description

technical field [0001] The invention relates to the field of industrial control system intrusion detection, in particular to an intrusion detection and positioning method and system based on control invariant modeling. Background technique [0002] As an important control unit of modern control systems, programmable logic controllers (PLCs) are facing an increasingly wide range of cyberattack threats against industrial control systems with the deep integration of industrialization and informatization. Port scanning is used to identify, and some of the protocols themselves have been parsed. Attackers can fully control the PLC by obtaining the target PLC certificate and other methods, thereby launching command injection and coordinated stealth attacks. Intrusion detection is a protection technology that ensures system security by means of security monitoring and abnormal alarm. It collects equipment and network-related information in industrial control systems, analyzes and id...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/40H04L67/12
CPCH04L63/1408H04L63/1416H04L63/1466H04L67/12
Inventor 程鹏余华杨泽域陈积明
Owner ZHEJIANG UNIV