工业控制网络入侵检测技术研究  

作　　者：郝文涛 鲁晔 水永莉 

机构地区：[1]西安航空学院网络信息中心,陕西西安710077 [2]宝鸡文理学院计算机学院,陕西宝鸡721013 [3]航空工业西安航空计算机技术研究所凯翔公司,陕西西安710065

出　　处：《工业控制计算机》2022年第4期1-3,6,共4页Industrial Control Computer

基　　金：陕西省教育厅科研计划资助项目(19JK0040);陕西省科技计划资助项目(2020GY-041)。

摘　　要：随着工业化和信息化融合发展的不断深入,越来越多的互联网技术被应用到了工业控制网络中,其安全问题也随着各类病毒攻击事件的增加而成为人们关注的焦点。入侵检测技术作为主动安全防护措施,可以有效弥补传统安全防护技术的不足。因此,面向工业控制网络的入侵检测技术成为了工控安全领域研究的热点。以基于工业控制网络的入侵检测技术为研究目标,分析了该领域中面临的问题;首先,介绍了工业控制系统的具体结构及其特点;其次,对基于工业控制网络的入侵检测关键技术和方法进行详细解释;最后,对基于工业控制网络的入侵检测技术方法进行总结和展望。With the continuous development of the integration of industrialization and information technology,more and more Internet technologies have been applied to industrial control networks,and their security issues have become the focus of attention with the increase of various virus attacks.As an active security protection measure,intrusion detection technology can effectively make up for the shortcomings of traditional security protection technology.Therefore,intrusion detection tech-nology for industrial control networks has become a hot research topic in the field of industrial control security.This paper takes the intrusion detection technology based on industrial control network as the research objective,and analyzes the problems faced in this field.Firstly,introduces the specific structure and characteristics of industrial control system.Secondly,the key technology of intrusion detection based on industrial control network,and methods are explained in detail.Finally,the intrusion detection technology methods based on industrial control network are summarized and prospected.

关 键 词：工业控制网络 入侵检测 机器学习 深度学习 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP273[自动化与计算机技术—计算机科学与技术]