协议异常检测技术在核电厂实时信息系统中的应用

Application of Protocol Anomaly Detection Technology in Real Time Information System of Nuclear Power Plant

网络安全是当前人人关注的焦点问题,入侵检测技术因具有主动防御特性而成为研究重点。针对核电厂实时信息系统建立协议异常检测系统,实现结合网络数据的转移和频率特性的检测算法,并从系统部署、运行流程等方面介绍系统的功能。运行结果表明,此系统能够有效检测入侵。

The network security status of the real time information system in nuclear power plant is investigated, and the current status of unitary safety means is reported. In accordance with the transfer and frequency characteristics of network data, the detection algorithm which combines both characteristics is proposed, and the protocol anomaly detection system is established. The functions of system are introduced from the aspects of system deployment , running processes, etc. The result of operation indicates that this system can effectively detect intrusion.