Modbus Communication Pattern Learning Based Abnormal Traffic Detection Apparatus and Method

The present invention is mode, as a bus communication patterns related to the abnormal traffic detection apparatus and method based on a study, the Modbus communication pattern abnormal traffic detection apparatus based on the learning in accordance with the present invention Modbus / TCP may abnormal traffic detection and responding to early in the protocol that is characterized. According to the invention, the Modbus communication pattern can be detected a number of various types of abnormal traffic based on learning. That is, by detecting abnormal traffic that could interfere with the safe operation of the control system at an early stage, it is possible to provide a communication service between the control system stable. In particular, there is an advantage in Modbus / TCP in an effective abnormal traffic on the protocol to be detected early, can improve the reliability of service as rapid discovery and response to security threats in the control system the intranet can ensure availability.