SCANNING ATTACK DETECTION APPARATUS IN CONTROL NETWORK

摘要

The present invention relates to a scanning attack detecting apparatus in a control network, and more particularly, to a vector space generating module for collecting network and security management (NSM) events occurring in a control network or a system, And a relevance analysis module for clustering based on the distance between vectors configured by the vector space generation module and analyzing the association between the elements of the cluster to detect an abnormal symptom.