Session slicing of mirrored packets
US-12184680-B2 · Dec 31, 2024 · US
Method for detecting anomalies in a control network
US9197652B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-9197652-B2 |
| Application number | US-201013497461-A |
| Country | US |
| Kind code | B2 |
| Filing date | Aug 12, 2010 |
| Priority date | Sep 21, 2009 |
| Publication date | Nov 24, 2015 |
| Grant date | Nov 24, 2015 |
How to read this patent
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
- Title
What the patent document calls the invention.
- Abstract
A short plain-language summary of the technical disclosure.
- Assignees and inventors
Who owns or filed the patent and who is credited as inventor.
- Key dates
Filing, priority, publication, and grant dates set the timeline.
- First independent claim
The legal scope of protection — read this for what is actually claimed.
- CPC / IPC classifications
Technology tags used to group this patent with similar filings.
- Citations and related patents
Prior art links and similar publications in this corpus.
Abstract
Official abstract text for this publication.
A method for monitoring and controlling, industrial or building automation to detect anomalies in a control network, wherein a technology of an intrusion detection system (IDS) is configured to analyze a time sequence and time intervals of correct messages in the network traffic and to use the messages to train an anomaly detection system. Detecting a time sequence and a rhythm of correct messages allows for the detection of malfunctions or manipulations of devices and attacks that are performed using regular monitoring or control stations that have been taken over by attackers or that are defect, and that cannot be detected using content-based methods or by a considerable increase of data traffic. An additional security barrier is thus provided that can continue monitoring and protecting a technical unit from possible acts of sabotage, even if the control network of the technical unit has already been corrupted.
First claim
Opening claim text (preview).
The invention claimed is: 1. A method for detecting anomalies in a control network, comprising: detecting, by a microprocessor, communication data in the control network; detecting, by the microprocessor, time intervals between correct messages in the communication data, and storing into training data the time intervals between correct messages in the communication data; training, by the microprocessor, an anomaly detection system using the training data; detecting, by the m…
Assignees
Inventors
Classifications
Electricity · mapped topic
Electricity · mapped topic
- H04L63/1416Primary
Electricity · mapped topic
Electricity · mapped topic
Electricity · mapped topic
Patent family
Related publications grouped by family.
External sources
Next steps
Free tools are coming soon. Tell us what you want to track and we'll notify you.
Frequently asked questions
Answers are generated from the same data shown on this page.
- What does patent US9197652B2 cover?
- A method for monitoring and controlling, industrial or building automation to detect anomalies in a control network, wherein a technology of an intrusion detection system (IDS) is configured to analyze a time sequence and time intervals of correct messages in the network traffic and to use the messages to train an anomaly detection system. Detecting a time sequence and a rhythm of correct messa…
- Who is the assignee on this patent?
- Busser Jens-Uwe, Kästner Jan, Munzert Michael, and 2 more
- What technology area does this patent fall under?
- Primary CPC classification H04L63/1416. Mapped technology areas include Electricity.
- When was this patent published?
- Publication date Tue Nov 24 2015 00:00:00 GMT+0000 (Coordinated Universal Time) (B2). Legal status and post-grant events are not shown on this page.
- What related patents are in patentsdb?
- We list 8 related publications on this page (citations in our corpus or others sharing the same primary CPC).