首页>
外国专利>
METHOD AND DEVICE FOR AUTOMATICALLY ESTABLISHING INTRUSION DETECTION MODEL BASED ON INDUSTRIAL CONTROL NETWORK
METHOD AND DEVICE FOR AUTOMATICALLY ESTABLISHING INTRUSION DETECTION MODEL BASED ON INDUSTRIAL CONTROL NETWORK
展开▼
机译：基于工业控制网络自动建立入侵检测模型的方法和装置
展开▼
页面导航
摘要
著录项
相似文献
摘要
The present application discloses a method for automatically establishing an intrusion detection model based on an industrial control network, including: judging whether a first intrusion detection model meets preset detection requirements, and extracting communication behavior traffic data in real time if not; setting a training data set and a test date set according to the communication behavior traffic data; establishing an initial intrusion detection model according to the training data set; and testing the initial intrusion detection model using the test date set, and establishing a second intrusion detection model meeting the preset detection requirements according to the test result. The second intrusion detection model has high detection accuracy, thereby increasing intrusion detection rate of abnormal behavior and reducing false positive rate and false negative rate.
展开▼
