Unauthorized Communication Detection in Manufacturing Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional unauthorized communication detection systems in manufacturing environments lack accuracy in detecting unauthorized communications, particularly when a session is established, leading to potential security breaches and decreased productivity.
Innovation Solution
An unauthorized communication detection device that obtains operation information, specifies elements related to communications, calculates an abnormal degree, and determines unauthorized communications based on a threshold value, using a two-step determination process involving element information and abnormal degree analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If conventional unauthorized communication detection systems use session establishment status to detect unauthorized communication, then detection can be performed, but detection accuracy is insufficient and cannot detect unauthorized communication when session is established
Solution Approach 1:
The system changes the detection parameters from simple session establishment status to multiple communication characteristics including packet intervals, data amounts, and communication timing. By monitoring these changed parameters, the system can detect unauthorized communication even when sessions are established, significantly improving detection accuracy without requiring complex additional hardware
Solution Approach 2:
The detection system segments the communication analysis into multiple independent characteristics: packet interval analysis, data amount analysis, timing analysis, and element correspondence analysis. Each segment analyzes a specific aspect of communication behavior, and the combined results provide comprehensive detection accuracy while keeping each individual analysis module relatively simple
2Measurement precision
If the system monitors multiple communication characteristics to improve detection accuracy, then unauthorized communication can be detected more accurately, but the detection process becomes more complex
Solution Approach 1:
The system performs preliminary actions by pre-storing element information in advance that defines legitimate communication patterns. During runtime, the system only needs to compare current communication characteristics against these pre-established elements, which simplifies the real-time detection process while maintaining high accuracy through multi-parameter analysis
Solution Approach 2:
The system introduces an intermediary element - the 'element information' database - that acts as a mediator between raw communication data and detection decisions. This intermediary stores pre-analyzed communication patterns and provides a reference framework that simplifies the comparison process, making multi-parameter detection more manageable
Data Source
AI summary
An unauthorized communication detection device that detects unauthorized communication in a manufacturing system that manufactures products includes: an obtainer that obtains operation information of the manufacturing system; a storage that stores element information indicating one or more target elements among a plurality of elements related to manufacturing of the products; a specifier that specifies, for each of a plurality of communications performed in the manufacturing system, an element corresponding to the communication, based on the operation information; a calculator that calculates an abnormal degree of each of one or more communications, which satisfy that the element specified by the specifier is included in the one or more target elements indicated by the element information, among the plurality of communications; and a determiner that determines that, when an abnormal degree calculated by the calculator is larger than a threshold value, a communication corresponding to the abnormal degree is the unauthorized communication.