Computer network technology has been increasingly infiltrated into the industrial control system and made the security problems more complex and changeable. Network security situation awareness technology can perceive the real-time threats that the network faced, and provide reliable basis for decision-making. This paper mainly focuses on the situation assessment and introduces finite state machine and fuzzy logic theory. Finite state machine can intuitively show the internal state transition of the industrial control system and detect the malicious packet attack’s type and severity. Fuzzy logic balances the semantic fuzziness and event uncertainty in the process of situation assessment, fuses the output data of the state machine and obtains the threat level which is helpful for decision analysis. Proved, the method proposed in this paper can give a reasonable and accurate security assessment of industrial control system.
State Machine Based Malicious Packet Attack Detection and Security Situation Assessment
01.10.2019
201456 byte
Aufsatz (Konferenz)
Elektronische Ressource
Englisch
Detection of Malicious Attack in Network Vehicle System via Observer
Springer Verlag | 2024
|Attack-Defense Tree Based Security Assessment
Springer Verlag | 2013
|Security Assessment via Attack Tree Model
Springer Verlag | 2013
|Distributed security situation awareness detection system
Europäisches Patentamt | 2023
|