MODBUS TCP COMMUNICATION BEHAVIOUR ANOMALY DETECTION METHOD BASED ON OCSVM DUAL-PROFILE MODEL

CORC > 沈阳自动化研究所 > 中国科学院沈阳自动化研究所 > 工业控制网络与系统研究室

	MODBUS TCP COMMUNICATION BEHAVIOUR ANOMALY DETECTION METHOD BASED ON OCSVM DUAL-PROFILE MODEL
	Shang WL(尚文利); Wan M(万明); Li L(李琳); Zeng P(曾鹏); Yu HB(于海斌)
	2016-06-02
专利国别	世界专利组织
专利号	WO2016082284A1
专利类型	发明
产权排序	1
权利人	中国科学院沈阳自动化研究所
其他题名	基于OCSVM双轮廓模型的Modbus TCP通信行为异常检测方法
中文摘要	Proposed is an anomaly detection method for communication behaviours in an industrial control system based on an OCSVM algorithm. According to the present invention, a normal behaviour profile model and an abnormal behaviour profile model, i.e. a dual-profile model, of communication behaviours in an industrial control system are established, parameter optimization is performed by means of a particle swarm optimisation (PSO) algorithm, an optimal intrusion detection model is obtained, and abnormal Modbus TCP communication traffic is identified. According to the present invention, the false alarm rate is reduced by means of cooperative discriminating of the dual profile model, the efficiency and reliability of anomaly detection are improved, and the method is more applicable to practical applications.
是否PCT专利	是
申请日期	2014-12-30
语种	英语
专利申请号	WO2014CN95576
内容类型	专利
源URL	[http://ir.sia.cn/handle/173321/18879]
专题	沈阳自动化研究所_工业控制网络与系统研究室
推荐引用方式 GB/T 7714	Shang WL,Wan M,Li L,et al. MODBUS TCP COMMUNICATION BEHAVIOUR ANOMALY DETECTION METHOD BASED ON OCSVM DUAL-PROFILE MODEL. WO2016082284A1. 2016-06-02.