APPARATUS AND METHOD OF DETECTING ANOMALY IN CONTROL SYSTEM NETWORK

PURPOSE: An apparatus and method for detecting abnormality in control system network are provided to make a normal behavior model of a control system and to detect the violation of a normal behavior model. CONSTITUTION: A normal behavior model database(207) stores normal behavior model information f...

Full description

Saved in:
Bibliographic Details
Main Authors LEE, GUN HEE, LEE, CHEOL WON, SEO, JUNG TAEK, KIM, WOO NYON, MIN, BYUNG GIL, KIM, SIN KYU, JANG, MOON SU
Format Patent
LanguageEnglish
Korean
Published 03.11.2011
Subjects
CALCULATING
COMPUTING
COUNTING
ELECTRIC COMMUNICATION TECHNIQUE
ELECTRIC DIGITAL DATA PROCESSING
ELECTRICITY
PHYSICS
TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION
Online AccessGet full text

Cover

More Information
Summary:PURPOSE: An apparatus and method for detecting abnormality in control system network are provided to make a normal behavior model of a control system and to detect the violation of a normal behavior model. CONSTITUTION: A normal behavior model database(207) stores normal behavior model information for generating a result of a normal behavior modeling module. An abnormal event detecting module(208) determines whether to compare normal behavior model information with packet data that is extracted by a packet preprocessing module. A manager interface(210) generates control network state information from the packet preprocessing module.
Bibliography:Application Number: KR20100050071