Clustering-Based Self-learning Approach for Security Rules in Industrial Communication Protocol
文献类型：会议论文
| 作者 | Shang WL(尚文利) ; Zeng P(曾鹏); Wan M(万明)
|
| 出版日期 | 2017 |
| 会议名称 | International Conference on Mechatronics and Intelligent Robotics, ICMIR 2017 |
| 会议日期 | May 20-21, 2017 |
| 会议地点 | Kunming, China |
| 关键词 | Modbus/TCP Self-learning K-means algorithm White-listingrule |
| 页码 | 257-263 |
| 通讯作者 | Wan M(万明) |
| 中文摘要 | Modbus/TCP, which is a widely used industrial communication protocol, has serious security flaws because of its openness and simplicity, and developing security mechanisms based on Modbus/TCP is very hot topic. However, it is an onerous task to set rules manually for these security mechanisms. In this paper, we propose a clustering-based self-learning approach for security rules to facilitate the rule setting when carrying out the Modbus/TCP defense. Furthermore, our approach analyzes the address information from Modbus/TCP packets in depth, and automatically learns the address range setting in the white-listing rules by using the K-means algorithm. Our experimental results show that, the proposed approach is very available and effective to generate the white-listing rules for Modbus/TCP. |
| 收录类别 | EI |
| 产权排序 | 1 |
| 会议录 | Advances in Intelligent Systems and Computing
 |
| 会议录出版者 | Springer Verlag |
| 会议录出版地 | Berlin |
| 语种 | 英语 |
| ISSN号 | 2194-5357 |
| ISBN号 | 978-3-319-65977-0 |
| 源URL | [http://ir.sia.cn/handle/173321/21240]  |
| 专题 | 沈阳自动化研究所_工业控制网络与系统研究室 |
| 作者单位 | Key Laboratory of Networked Control System Chinese Academy of Sciences, Shenyang Institute of Automation Chinese Academy of Sciences, Shenyang, China |
| 推荐引用方式 GB/T 7714 | Shang WL,Zeng P,Wan M. Clustering-Based Self-learning Approach for Security Rules in Industrial Communication Protocol[C]. 见:International Conference on Mechatronics and Intelligent Robotics, ICMIR 2017. Kunming, China. May 20-21, 2017. |
入库方式： OAI收割
来源：沈阳自动化研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。