首页>
外国专利>
AUTOMATIC ESTABLISHING METHOD AND APPARATUS FOR INTRUSION DETECTION MODEL BASED ON INDUSTRIAL CONTROL NETWORK
AUTOMATIC ESTABLISHING METHOD AND APPARATUS FOR INTRUSION DETECTION MODEL BASED ON INDUSTRIAL CONTROL NETWORK
展开▼
机译:基于工控网络的入侵检测模型自动建立方法及装置
展开▼
页面导航
摘要
著录项
相似文献
摘要
Disclosed is an automatic establishing method of an intrusion detection model based on an industrial control network, comprising: determining whether a first intrusion detection model meets a preset detection requirement, and if not, extracting communication behavior flow data in real time; setting a training data set and a test data set according to the communication behavior flow data; creating an initial intrusion detection model according to the training data set; and testing the initial intrusion detection model using the test data set, and creating a second intrusion detection model meeting a preset detection requirement according to the test result. The detection precision of the second intrusion detection model is high so that an intrusion detection rate of abnormal behaviors is increased, and a false alarm rate and a missing report rate are reduced.
展开▼