公开(公告)号：US09699204B2

公开(公告)日：2017-07-04

申请号：US14699449

申请日：2015-04-29

Applicant: Electronics and Telecommunications Research Institute

Inventor： Byoung Koo Kim ,  Dong Ho Kang ,  Jung Chan Na ,  Seon Gyoung Sohn ,  Young Jun Heo

IPC: H04L29/06 ,  H04L12/40 ,  H04L12/24 ,  H04L12/26 ,  H04L29/08

CPC classification number: H04L63/1425 ,  H04L12/40 ,  H04L41/142 ,  H04L43/026 ,  H04L67/12 ,  H04L69/16 ,  H04L69/329 ,  H04L2012/40228

Abstract: An abnormal traffic detection apparatus and method based on Modbus communication pattern learning is provided. The abnormal traffic detection apparatus based on the Modbus communication pattern learning previously detects and responds to abnormal traffic on a Modbus/TCP protocol. According to the present invention, a communication service between control systems can be stably provided by previously detecting the abnormal traffic capable of interfering with a stable operation of the control system. Particularly, since the effective abnormal traffic on the Modbus/TCP protocol can be previously detected, security of the control system can be increased by rapid detection and response with respect to security threats on the Intranet of the control system, and availability can be secured.