Attack / abnormality detection device, attack / abnormality detection method, and attack / abnormality detection program

摘要

The attack / abnormality detection apparatus according to the present invention newly receives from each of a set of normal manufacturing commands including information on command destinations and arrival order stored in the command storage area and a set of actual manufacturing commands. The attack / abnormality is detected by comparing the command contents in the order of arrival of the extracted two elements with the command extraction unit that extracts the element having the same command destination as the command destination included in the actual manufacturing command And a detection unit.