Search

The Modbus industry bus protocol is special, and the network intrusion data sample of industrial control system is not balanced. So this paper used OCSVM to construct double contour model combining normal OCSVM model, and abnormal OCSVM model to simulate the normal mode and abnormal mode of system communication. Then it realized the abnormal detection of industrial control system. In order to prevent the OCSVM model from overfitting and the low accuracy of classification, this paper applied the genetic algorithm to the industrial control network by optimizing the dimensionality reduction of the independent variable. This method improved the accuracy of the anomaly detection and reduced the modeling time. Simulation results show that the proposed algorithm is effective for anomaly detection of industrial network . [ABSTRACT FROM AUTHOR]

CAN( controller area network) bus is the most widely used field bus. Due to the lack of authentication and message checking mechanism, CAN bus has great security risks, so it is necessary to design a defense mechanism for CAN bus. In this paper, a priority hopping mechanism is designed, which introduces the dynamic hopping of identifiers by Hash function into a real-time scheduling algorithm. The fixed priority is calculated by a genetic algorithm, and the compromise range of priority is found out. Each frame is grouped, and the ID segment of data frame is segmented and reconstructed. The former part of the ID segment determines the priority and performs priority hopping, while the latter part of the ID segment hops dynamically at one time. Experimental results show that using dynamic priority and one-time ID Hopping to hop has a greater security improvement than the existing ID Hopping mechanism. [ABSTRACT FROM AUTHOR]