AN INTRUSION DETECTION SYSTEM FOR DETECTION OF INTRUSIONS IN AN AUTOMATED INFRASTRUCTURE

摘要

An intrusion detection system for detection of intrusions in an automated infrastructure An intrusion detection system (1) and method for detection of intrusions in an automated infrastructure providing process data to a controller adapted to control processes within said automated infrastructure monitored by a primary control system (7) adapted to output monitoring data to an operator (OP) of said automated infrastructure, wherein the process data provided by the automated infrastructure (2) are collected by at least one edge device (10) and supplied by means of a network cloud infrastructure (11) to a remote model scoring component (12) of a secondary control system (13) adapted to match the collected process data with a data model to determine an operation behaviour of the automated infrastructure, wherein an intrusion into the automated infrastructure is detected by an intrusion detection component (14) of the secondary control system (13) if an abnormal operation behaviour of the automated infrastructure has been determined by the model scoring component (12) of the secondary control system (13) and at the same time, the monitoring data output by the primary control system (7) indicate a normal operation behaviour of the automated infrastructure.