首页>
外国专利>
Methods and systems for use in identifying abnormal behavior in a control system including independent comparisons to user policies and an event correlation model
Methods and systems for use in identifying abnormal behavior in a control system including independent comparisons to user policies and an event correlation model
展开▼
机译:用于识别控制系统中异常行为的方法和系统,包括对用户策略和事件相关模型的独立比较
展开▼
页面导航
摘要
著录项
相似文献
摘要
Methods and apparatus for use in identifying abnormal behavior in a control system. Operating events associated with a control system are received, and an actual behavior of the control system is determined based on the received operating events. The actual behavior is compared to expected behavior to determine whether the actual behavior differs from the expected behavior. The expected behavior includes a correlation between a plurality of operating events associated with the control system. The expected behavior is updated based on an indication of whether the actual behavior is abnormal from a user.
展开▼