ANOMALY DETECTION SYSTEM USING RELIABILITY EVALUATION OF POWER PLANT CONTRO NETWORK ASSET

摘要

An anomaly detection system using reliability evaluation of power plant control network assets is disclosed. a power plant control network asset traffic collection module that collects real-time traffic data between power plant control network assets performing network communication within the power plant control network; A traffic analysis module for real-time analysis of traffic data collected in real-time by the power plant control network asset traffic collection module is configured. According to the above-described anomaly detection system using the reliability evaluation of the power plant control network asset, the traffic data in the power plant control network is collected and analyzed by network port mirroring, so that traffic in the power plant control network can be collected and analyzed without an agent. there is On the other hand, statistics such as the occurrence frequency or rate of UD codes of the power plant control network assets are secured in advance for a specific period, and the reliability of real-time UD codes is identified by comparing the statistics with the occurrence frequency or rate of UD codes identified in real time. By being configured to do so, there is an effect of being able to detect in real time whether the real-time UD code is an intruder's connection or not.