Clustering-Based Self-learning Approach for Security Rules in Industrial Communication Protocol

CORC > 沈阳自动化研究所 > 中国科学院沈阳自动化研究所 > 工业控制网络与系统研究室

	Clustering-Based Self-learning Approach for Security Rules in Industrial Communication Protocol
	Shang WL(尚文利); Zeng P(曾鹏); Wan M(万明)
	2017
会议名称	International Conference on Mechatronics and Intelligent Robotics, ICMIR 2017
会议日期	May 20-21, 2017
会议地点	Kunming, China
关键词	Modbus/TCP Self-learning K-means algorithm White-listingrule
页码	257-263
通讯作者	Wan M(万明)
中文摘要	Modbus/TCP, which is a widely used industrial communication protocol, has serious security flaws because of its openness and simplicity, and developing security mechanisms based on Modbus/TCP is very hot topic. However, it is an onerous task to set rules manually for these security mechanisms. In this paper, we propose a clustering-based self-learning approach for security rules to facilitate the rule setting when carrying out the Modbus/TCP defense. Furthermore, our approach analyzes the address information from Modbus/TCP packets in depth, and automatically learns the address range setting in the white-listing rules by using the K-means algorithm. Our experimental results show that, the proposed approach is very available and effective to generate the white-listing rules for Modbus/TCP.
收录类别	EI
产权排序	1
会议录	Advances in Intelligent Systems and Computing
会议录出版者	Springer Verlag
会议录出版地	Berlin
语种	英语
ISSN号	2194-5357
ISBN号	978-3-319-65977-0
内容类型	会议论文
源URL	[http://ir.sia.cn/handle/173321/21240]
专题	沈阳自动化研究所_工业控制网络与系统研究室
作者单位	Key Laboratory of Networked Control System Chinese Academy of Sciences, Shenyang Institute of Automation Chinese Academy of Sciences, Shenyang, China
推荐引用方式 GB/T 7714	Shang WL,Zeng P,Wan M. Clustering-Based Self-learning Approach for Security Rules in Industrial Communication Protocol[C]. 见:International Conference on Mechatronics and Intelligent Robotics, ICMIR 2017. Kunming, China. May 20-21, 2017.