Modbus communication behavior modeling and SVM intrusion detection method
文献类型：会议论文
| 作者 | Shang WL(尚文利) ; Cui JR(崔君荣); Wan M(万明); An PF(安攀峰); Zeng P(曾鹏)
|
| 出版日期 | 2016 |
| 会议名称 | 2016 6th International Conference on Communication and Network Security, ICCNS 2016 |
| 会议日期 | November 12-14, 2016 |
| 会议地点 | Singapore, Singapore |
| 关键词 | Industrial control network intrusion detection Modbus/TCP feature extraction SVM |
| 页码 | 77-82 |
| 通讯作者 | 尚文利 |
| 中文摘要 | The security and typical attack behavior of Modbus/TCP industrial network communication protocol are analyzed. The data feature of traffic flow is extracted through the operation mode of the depth analysis abnormal behavior, and the intrusion detection method based on the support vector machine (SVM) is designed. The method analyzes the data characteristics of abnormal communication behavior, and constructs the feature input structure and detection system based on SVM algorithm by using the direct behavior feature selection and abnormal behavior pattern feature construction. The experimental results show that the method can effectively improve the detection rate of abnormal behavior, and enhance the safety protection function of industrial network. |
| 收录类别 | EI |
| 产权排序 | 1 |
| 会议录 | 2016 6th International Conference on Communication and Network Security, ICCNS 2016
 |
| 会议录出版者 | ACM |
| 会议录出版地 | New York |
| 语种 | 英语 |
| ISBN号 | 978-1-4503-4783-9 |
| 源URL | [http://ir.sia.cn/handle/173321/20183]  |
| 专题 | 沈阳自动化研究所_工业控制网络与系统研究室 |
| 推荐引用方式 GB/T 7714 | Shang WL,Cui JR,Wan M,et al. Modbus communication behavior modeling and SVM intrusion detection method[C]. 见:2016 6th International Conference on Communication and Network Security, ICCNS 2016. Singapore, Singapore. November 12-14, 2016. |
入库方式： OAI收割
来源：沈阳自动化研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。