首页> 外国专利> Methods and systems for use in identifying abnormal behavior in a control system including independent comparisons to user policies and an event correlation model

Methods and systems for use in identifying abnormal behavior in a control system including independent comparisons to user policies and an event correlation model

机译:用于识别控制系统中异常行为的方法和系统,包括对用户策略和事件相关模型的独立比较

摘要

Methods and apparatus for use in identifying abnormal behavior in a control system. Operating events associated with a control system are received, and an actual behavior of the control system is determined based on the received operating events. The actual behavior is compared to expected behavior to determine whether the actual behavior differs from the expected behavior. The expected behavior includes a correlation between a plurality of operating events associated with the control system. The expected behavior is updated based on an indication of whether the actual behavior is abnormal from a user.
机译:用于识别控制系统中异常行为的方法和装置。接收与控制系统相关联的操作事件,并且基于接收到的操作事件来确定控制系统的实际行为。将实际行为与预期行为进行比较,以确定实际行为是否与预期行为不同。预期行为包括与控制系统关联的多个操作事件之间的相关性。基于来自用户的实际行为是否异常的指示来更新预期行为。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号