【摘要】：為了提高工控系統(tǒng)入侵的檢測率,討論了傳統(tǒng)工控入侵檢測技術(shù)的原理,并從信息論的觀點進行了對比研究.通過對工控系統(tǒng)特異性及其攻擊手法的建模,歸納出工控攻擊在協(xié)議棧、統(tǒng)計特性、通信行為等方面表現(xiàn)出的動態(tài)和靜態(tài)指紋,基于一種新的異構(gòu)信息的抽象方法,提出并實現(xiàn)了一個基于組合神經(jīng)網(wǎng)絡的啟發(fā)式工控系統(tǒng)異常檢測模型.測試結(jié)果表明該檢測模型運行高效,相比一般智能方法檢測結(jié)果更為準確.
[Abstract]:In order to improve the intrusion detection rate of industrial control system, the principle of traditional industrial control intrusion detection technology is discussed, and a comparative study is carried out from the point of view of information theory. Through the modeling of the specificity of industrial control system and its attack techniques, the dynamic and static fingerprints of industrial control attack in protocol stack, statistical characteristics, communication behavior and so on are summarized, which is based on a new abstract method of heterogeneous information. An anomaly detection model of heuristic industrial control system based on combined neural network is proposed and implemented. The test results show that the detection model is efficient and more accurate than the general intelligent method.
【作者單位】： 四川師范大學網(wǎng)絡與通信技術(shù)研究所;
【基金】：四川省教育廳青年基金(15ZB0026)
【分類號】：TP183;TP393.08

【相似文獻】

相關(guān)期刊論文 前1條

1 陳衛(wèi)民,魯連奎,全婕,孫小勇,張保平;PLC工控系統(tǒng)中的網(wǎng)絡設計[J];計算機應用研究;2000年11期

相關(guān)碩士學位論文 前1條

1 徐麗娟;基于攻擊圖的工業(yè)控制網(wǎng)絡安全隱患分析[D];北京郵電大學;2015年

，

本文編號：2494466