METHOD FOR DETECTING REMOTE ATTACKS AGAINST AUTOMATIZED CONTROL SYSTEMS Russian patent published in 2005 - IPC

FIELD: data protection technologies.

SUBSTANCE: method includes setting a number of standards for possible attacks, minimally allowed value of likeness coefficient of compared sign fields of message packets, maximally allowed number of matches of fields of support i-numbered packet (standard) to compared fields of packet from communication channel and setting a number of matches, recording a set of support packets, containing standards of given attacks, and after receiving from communication channel of k-numbered message packet, selecting it from fields header, comparing their value to values of fields of support packets, calculating comparison coefficients, comparing them to preset value K_m.min, and with ≥ K_m.min recoding K_m.i, appropriate for it message packet, increasing K_mi for one unit, with < K_m.min, receipt of k+1 message packet, after that actions, starting from selecting fields from header of k+1 packet, are repeated until satisfying condition K_mi≥K_m.iadd, after that possibility of attack going on is evaluated.

EFFECT: higher efficiency.

2 cl, 7 dwg, 1 tbl