Chung Ja Kim

US Patent:

20200059484, Feb 20, 2020

Filed:

Aug 8, 2019

Appl. No.:

16/535521

Inventors:

- Princeton NJ, US
LuAn Tang - Pennington NJ, US
Zhengzhang Chen - Princeton Junction NJ, US
Chung Hwan Kim - Pennington NJ, US
Zhichun Li - Princeton NJ, US
Ziqiao Zhou - Chapel Hill NC, US

International Classification:

H04L 29/06
G05B 19/418

Abstract:

A computer-implemented method for implementing protocol-independent anomaly detection within an industrial control system (ICS) includes implementing a detection stage, including performing byte filtering using a byte filtering model based on at least one new network packet associated with the ICS, performing horizontal detection to determine whether a horizontal constraint anomaly exists in the at least one network packet based on the byte filtering and a horizontal model, including analyzing constraints across different bytes of the at least one new network packet, performing message clustering based on the horizontal detection to generate first cluster information, and performing vertical detection to determine whether a vertical anomaly exists based on the first cluster information and a vertical model, including analyzing a temporal pattern of each byte of the at least one new network packet.

Address:

14212 Cribbage Ter, Silver Spring, MD 20905

VIN:

JN8AZ08W77W611352

Make:

NISSAN

Model:

MURANO

Year:

2007