Industrial control system physical intrusion attack detection method based on serial communication bus signal analysis

Abstract

The invention discloses an industrial control system physical intrusion attack detection method based on serial communication bus signal analysis, which comprises the following steps: detection signalis actively sent to the communication bus through a bus controller, After sampling and analyzing the signal of the communication bus, the monitoring device compares the signal with the standard signal stored in the device database, and uses the noise reduction technology and the weak signal detection technology to detect the intrusion signal in the difference signal, according to the detection results of intrusion signals caused by physical intrusion devices, any external malicious device in the system can be quickly and effectively determined and the security state that whether the system issubject to physical intrusion attack is determined. The technical problem that, in the prior art, the network security of the industrial control serial communication bus attracted by physical intrusion cannot be effectively detected by the network defense method is solved.

Description

technical field [0001] The invention belongs to the technical field of attack detection of industrial control systems, in particular to a method for detecting physical intrusion attacks of industrial control systems based on serial communication bus signal analysis. Background technique [0002] The industrial control system is an automatic control system applied in the fields of electric power, industrial production, transportation, processing and manufacturing. The system mainly relies on the control center to monitor the operating status of the equipment in each level of the network, and to monitor the physical measurement data collected on site. Process analysis to maintain system stability and security. With the development of communication technology and the integration of information networks, the cascading relationship of industrial control systems in various fields makes the whole become increasingly large and complex. During the transformation process of industrial...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a physical intrusion attack detection method of industrial control system based on serial communication bus signal analysis, which is used to prevent physical intrusion attack threats that the industrial control system may face, and can effectively solve the problem in the industrial control system serial communication bus network. Traditional network intrusion prevention methods cannot effectively detect the security problems of malicious external devices in the system

Images