METHOD FOR DETECTING ANOMALIES IN OPERATION OF AUTOMATED SYSTEM NETWORK Russian patent published in 2020 - IPC H04L1/00 G06F21/00 

FIELD: physics.

SUBSTANCE: invention relates to safety monitoring means. Disclosed is a method of detecting anomalies in the operation of an AC network, which includes the following steps: receiving a network packet intercepted in an AC network and identifying address fields and data fields therein; detecting address and interface of sender node and address and interface of receiving node, and for detected pair find record in signal dictionary; detecting response of receiving node to detected record of signals dictionary and comparing this reaction with expected reaction; returning an abnormality card to the user, wherein the anomaly card includes information including at least one of the types of information selected from the group: automatically generated network packet parsing rules; an address and/or interface of a source node and/or a destination node not found in an interface catalogue; deviation between observed and expected response to signal dictionary recording.

EFFECT: technical result consists in improvement of accuracy in detection of anomalies in the operation of an automated system network.

9 cl, 13 tbl, 12 dwg