Event-based anomaly detection for non-public industrial communication protocols in SDN-based control systems
文献类型：期刊论文
| 作者 | Jin X(金曦)2,3; Jing, Yuan4; Wan M(万明)4; Yao, Jiangyuan1; Wang HG(王洪光)
|
| 刊名 | Computers, Materials and Continua
 |
| 出版日期 | 2018 |
| 卷号 | 55期号:3页码:447-463 |
| 关键词 | Event sequence anomaly detection non-public industrial communication protocols SDN |
| ISSN号 | 1546-2218 |
| 产权排序 | 4 |
| 通讯作者 | Yao, Jiangyuan |
| 中文摘要 | As the main communication mediums in industrial control networks, industrial communication protocols are always vulnerable to extreme exploitations, and it is very difficult to take protective measures due to their serious privacy. Based on the SDN (Software Defined Network) technology, this paper proposes a novel event-based anomaly detection approach to identify misbehaviors using non-public industrial communication protocols, and this approach can be installed in SDN switches as a security software appliance in SDN-based control systems. Furthermore, aiming at the unknown protocol specification and message format, this approach first restructures the industrial communication sessions and merges the payloads from industrial communication packets. After that, the feature selection and event sequence extraction can be carried out by using the N-gram model and K-means algorithm. Based on the obtained event sequences, this approach finally trains an event-based HMM (Hidden Markov Model) to identify aberrant industrial communication behaviors. Experimental results clearly show that the proposed approach has obvious advantages of classification accuracy and detection efficiency. |
| 收录类别 | SCI ; EI |
| 语种 | 英语 |
| WOS记录号 | WOS:000438476000006 |
| 源URL | [http://ir.sia.cn/handle/173321/22206]  |
| 专题 | 沈阳自动化研究所_空间自动化技术研究室 |
| 作者单位 | 1.College of Information Science and Technology, University of Hainan, Haikou 570228, China 2.Shenyang Institute of Automation, Chinese Academy of Sciences, Shenyang 110016, China 3.Department of Computer Science and Engineering, Washington University, St Louis, MO 63130, United States 4.School of Information, Liaoning University, Shenyang 110036, China |
| 推荐引用方式 GB/T 7714 | Jin X,Jing, Yuan,Wan M,et al. Event-based anomaly detection for non-public industrial communication protocols in SDN-based control systems[J]. Computers, Materials and Continua,2018,55(3):447-463. |
| APA | Jin X,Jing, Yuan,Wan M,Yao, Jiangyuan,&王洪光.(2018).Event-based anomaly detection for non-public industrial communication protocols in SDN-based control systems.Computers, Materials and Continua,55(3),447-463. |
| MLA | Jin X,et al."Event-based anomaly detection for non-public industrial communication protocols in SDN-based control systems".Computers, Materials and Continua 55.3(2018):447-463. |
入库方式： OAI收割
来源：沈阳自动化研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。