CN107046509A - A kind of intelligent industrial-control network data integration method parsed based on mirror port - Google Patents

A kind of intelligent industrial-control network data integration method parsed based on mirror port Download PDF

Info

Publication number
CN107046509A
CN107046509A CN201611263227.0A CN201611263227A CN107046509A CN 107046509 A CN107046509 A CN 107046509A CN 201611263227 A CN201611263227 A CN 201611263227A CN 107046509 A CN107046509 A CN 107046509A
Authority
CN
China
Prior art keywords
data
protocol
connection
mirror port
port
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201611263227.0A
Other languages
Chinese (zh)
Inventor
刘慧芳
王朝栋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
SHANGHAI SANLING SAFEGUARD INFORMATION SAFETY CO Ltd
Original Assignee
SHANGHAI SANLING SAFEGUARD INFORMATION SAFETY CO Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SHANGHAI SANLING SAFEGUARD INFORMATION SAFETY CO Ltd filed Critical SHANGHAI SANLING SAFEGUARD INFORMATION SAFETY CO Ltd
Priority to CN201611263227.0A priority Critical patent/CN107046509A/en
Publication of CN107046509A publication Critical patent/CN107046509A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00Packet switching elements
    • H04L49/20Support for services
    • H04L49/208Port mirroring
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G05B19/4183Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by data acquisition, e.g. workpiece identification
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G05B19/4185Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by the network communication
    • G05B19/4186Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by the network communication by protocol, e.g. MAP, TOP
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • H04L69/163In-band adaptation of TCP data exchange; In-band control procedures
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22Parsing or analysis of headers
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • H04L2012/40208Bus networks characterized by the use of a particular bus standard
    • H04L2012/40228Modbus
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02PCLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
    • Y02P90/00Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
    • Y02P90/02Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Manufacturing & Machinery (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The present invention relates to a kind of intelligent industrial-control network data integration method parsed based on mirror port, first, after the packet capturing function by realizing mirror port to interchanger configuration mirroring function, these data are read;Then connection is created again, these data captured are gathered into connection, and the timeout flag of connection is used as using TCP state machine or time-out 300S;It is determined that the client and service end of connection;Compare the characteristic value of protocol header, determine protocol class;According to protocol function code, different protocol analysis algorithms are selected;Carry out data display, data storage.The present invention has the beneficial effect that:This method can avoid the situation that host computer is attacked from Internet gathered data;Multiple PLC real time data can be gathered simultaneously, and can efficiently enter same data platform, substitution gathers different plc datas, then the existing method sent outward by different host computers, communication link is reduced, the extremely strong new tool of feasibility is provided for the basic collecting part of factory's big data.

Description

A kind of intelligent industrial-control network data integration method parsed based on mirror port
Technical field
The present invention relates to industrial control network big data acquisition technique, more particularly to a kind of intelligence parsed based on mirror port Industry control network data integration method.
Background technology
Intelligence manufacture is to be based on generation information technology, through each ring of the manufacturing activities such as design, production, management, service Save, optimize self-decision from perception, wisdom with information depth, be precisely controlled the Advanced Manufacture Process of the function such as execution, system certainly With the general name of pattern.The most crucial key element of intelligence manufacture is, from intelligent design, intelligent control, intelligence operation to intelligent decision, The interrelated of data is carried out by way of networking.
The existing industry control security solution of in the market has limitation, there is relatively large deviation with the real demand of user. Therefore, each factory all employ substantial amounts of external control device, and communications protocol used in these control devices is all different, Each communications protocol is communicated except normal industrial data, and the status data for also including equipment is communicated and that may be present Program backdoor data, these version of an agreement are only marginally disclosed, and we are when using these equipment, it is considered to obtain only It is how to use its function, its hidden danger that may be brought is not considered, therefore once expose these industrial control equipments In internet, great hidden danger certainly will be carried out to the safety belt of China's basic industries facility.
When internet is also underdeveloped, shop equipment is typically all physical isolation, is not networked, in recent years, many Factory needs the data of production line passing to Team Decision department, and to carry out high-level production scheduling, many factories are complete After building into basic automatization, generally require to carry out the integration work of each platform data, due to upper system and control Net is connected, and upper layer network is fetched evidence from the database of host computer or host computer, and these basic industrial control equipments all start Direct or indirect networking, then once occurring network attack, the data that host computer is provided will be insincere, in the urgent need to one kind both Do not influence business to carry out and can guarantee that the data integration method of information security.
This case combination actual conditions are pointed out, in view of the above, needing effectively to innovate prior art.
The content of the invention
For disadvantages described above, the present invention provides a kind of intelligent industrial-control network data integration method parsed based on mirror port, To solve many deficiencies of prior art.
To achieve the above object, the present invention uses following technical scheme:
A kind of intelligent industrial-control network data integration method parsed based on mirror port, is comprised the steps of:
(1) first, the packet in capture network, by the packet capturing function that mirror port is realized to interchanger configuration mirroring function Afterwards, these data are read;
(2) connection and then is again created, these data captured are gathered into connection, using TCP state machine or time-out 300S as even The timeout flag connect;
(3) the client and service end of connection are determined:The TCP connections of three-way handshake agreement are observed, server end is used for receiving SYN bags send SYN/ACK bags;
(4) compare the characteristic value of protocol header, determine protocol class;
(5), then, according to protocol function code, different protocol analysis algorithms are selected;
(6) data display is carried out, and the I/O Address that is being communicated according to industry control environment carries out matched data parsing, will solve The data of analysis are that database address field name, register value are database number by database table name, register address of IP address Value field name, carries out data storage;
(7) database access interface is externally provided, used for industrial big data analysis platform.
The agreement of step (3) includes modbus agreements, and the transmitting terminal of data cube computation is service end, and uses 502 port conducts Serve port, the other end is then client, and the consultation regenerates new port when building connection again every time, and this port value can Obtained by parsing tcp RMI negotiation datas bag, finally by same serve port, same source IP, purpose IP, source MAC, Purpose MAC TCP bags are judged as YES to be produced with a pair of clients and service end.
The function code of each agreement different command of step (5) is also different, needs matching different according to different function codes Analytical algorithm.
The intelligent industrial-control network data integration method of the present invention parsed based on mirror port is had the beneficial effect that:
(1) this method can avoid the situation that host computer is attacked from Internet gathered data;
(2), due to there is the contact of the data of a variety of industrial protocols in Internet, by this acquisition mode, it can gather multiple simultaneously PLC real time data, and can efficiently enter same data platform, it instead of and gather different plc datas by different host computers, The existing method sent outward again, reduces communication link, and feasibility pole is provided for the basic collecting part of factory's big data Strong new tool.
Brief description of the drawings
The present invention is described in further detail below according to accompanying drawing.
Fig. 1 is the flow of the intelligent industrial-control network data integration method parsed described in the embodiment of the present invention based on mirror port Figure;
Fig. 2 is that the algorithm part of the intelligent industrial-control network data integration method parsed described in the embodiment of the present invention based on mirror port is shown It is intended to.
Embodiment
As shown in Figure 1-2, the intelligent industrial-control network data integration side parsed based on mirror port described in the embodiment of the present invention Method, the mirror port data used be it is a kind of using based on ICP/IP protocol as the prevailing transmission agreement of industry control network collection Close, the data acquisition system is by source MAC, target MAC (Media Access Control) address, source IP, purpose IP, source port, destination interface, protocol type and leads to The communication sequence composition of the two-way bag of the tuple of letter time etc. eight.
General form is:
TCP/IP industry control protocol headers protocol data section
Therefore, when parsing data, need first to peel TCP/IP head off, be referred to protocol data by industry control protocol header a certain Agreement, then carry out the parsing of protocol data section.
Comprise the steps of:
(1) first, the packet in capture network, by the packet capturing function that mirror port is realized to interchanger configuration mirroring function Afterwards, these data are read;
(2) connection and then is again created, these data captured are gathered into connection, using TCP state machine or time-out 300S as even The timeout flag connect;
(3) the client and service end of connection are determined;
Including in accordance with the TCP connections of three-way handshake agreement, server end is used for receiving SYN bags or sends SYN/ACK bags.First Secondary Seq:0, second of Seq:0, Ack:1, third time Seq:1, Ack:1.
For example, modbus agreements, the transmitting terminal of data cube computation is service end, and uses 502 ports as serve port, separately One end is then client, and the consultation regenerates new port when building connection again every time, and this port value can pass through parsing Tcp RMI negotiation datas bag is obtained, finally by same serve port, same source IP, purpose IP, source MAC, purpose MAC TCP bags are judged as YES what is produced with a pair of clients and service end.
(4) compare the characteristic value of protocol header, determine protocol class;
(5), then, according to protocol function code, different protocol analysis algorithms are selected;Each the function code of agreement different command is also Different, for example, the 16 function codes representative of modbus agreements is to write multiple registers, function code is to read multiple registers, root Need to match different analytical algorithms according to different function codes.
(6) data display is carried out, and the I/O Address that is being communicated according to industry control environment carries out matched data parsing, Using IP address it is that database table name, register address are database address field name, register value as data by the data of parsing Storehouse numeric field name, carries out data storage;
For example, 16 system numbers of 4 bytes, it is a number to be parsed into integer, and it is another numerical value again to be parsed into floating type, It must be converted according to the data type of user configuring;Also there is byte order conversion in parsing of some agreements to floating number The problem of, for example, when configuring modbus agreements, it is necessary to select 2143,4321,1234,3412 these different byte orders, It so can just parse correct numerical value.
(7) database access interface is externally provided, used for industrial big data analysis platform, for example, the OA systems of management net System, MES system etc., these systems all may have access to the creation data of factory, and will not therefore cause caused by information security Stopping production problem;
By building simulation industry platform, different service operation environment are set up, by mirror port packet capturing, the change with actual environment Amount is compared, and finally parses the implication of corresponding data, verifies actual numerical value.
The intelligent industrial-control network data integration method parsed based on mirror port described in the above embodiment of the present invention, it has Body application example is as follows:
One piece of data frame in example one, FINS agreements:
Data to DW100 first on the host computer page write 39, while carrying out data packet capturing by mirror port, can obtain Data below bag:
FINS protocol headers:46 49 4e 53 00 00 00 1e 00 00 00 02 00 00 00 00
FINS data segments:80 00 02 00 01 00 00 ef 00 00 01 02 82 00 64 00 00 02 00 00 42 1c
Most important of which part is as follows:
Internal memory write order:01 02
Region code:82
Initial address:00 64
Correspondence numerical value:00 00 42 1C
Analysis result:00 64 are converted to the decimal system for 100, and the corresponding data type of region code is Dword, and 00 00 42 1C lead to Cross the system analytical algorithms of float 16 and draw 39.The value corresponding instrument in PLC is temperature, therefore can pass through mirror port solution Analysis obtains the temperature data of some live environment.
Example 2:One piece of data frame in S7 agreements:
13 are write to DB2.DBD0 data first on the host computer page, can be with while carry out data packet capturing by mirror port Obtain data below bag:
S7 protocol headers:32 01 00 0c 00 00 0e 00 08 05 01 12 0a 10
S7 data segments:02 00 04 00 02 84 00 00 00 00 04 00 20 41 50 00 00
Most important of which part is as follows:
Function code type:02
Data block address:00 02
Regional number:84 00
Data-bias address:00 00
Correspondence numerical value:41 50 00 00
Analysis result:00 02 resolve to DB2, and offset address resolves to 0, and correspondence numeric value analysis is 13, value correspondence in PLC Instrument be liquid level, therefore the liquid level data for obtaining some live environment can be parsed by mirror port.
The above-mentioned description to embodiment is it will be appreciated that and using this for the ease of those skilled in the art Case technology, person skilled in the art obviously can make various modifications to these examples easily, and described herein one As principle be applied in other embodiments without passing through performing creative labour.Therefore, this case is not limited to above example, ability The technical staff in domain is according to the announcement of this case, and the improvement made for this case and modification all should be in the protection domains of this case.

Claims (3)

1. a kind of intelligent industrial-control network data integration method parsed based on mirror port, it is characterised in that comprise the steps of:
(1) first, the packet in capture network, by the packet capturing function that mirror port is realized to interchanger configuration mirroring function Afterwards, these data are read;
(2) connection and then is again created, these data captured are gathered into connection, using TCP state machine or time-out 300S as even The timeout flag connect;
(3) the client and service end of connection are determined:The TCP connections of three-way handshake agreement are observed, server end is used for receiving SYN bags send SYN/ACK bags;
(4) compare the characteristic value of protocol header, determine protocol class;
(5), then, according to protocol function code, different protocol analysis algorithms are selected;
(6) data display is carried out, and the I/O Address that is being communicated according to industry control environment carries out matched data parsing, will solve The data of analysis are that database address field name, register value are database number by database table name, register address of IP address Value field name, carries out data storage;
(7) database access interface is externally provided, used for industrial big data analysis platform.
2. the intelligent industrial-control network data integration method according to claim 1 parsed based on mirror port, it is characterised in that: The agreement of step (3) includes modbus agreements, and the transmitting terminal of data cube computation is service end, and uses 502 ports as service end Mouthful, the other end is then client, and the consultation regenerates new port when building connection again every time, and this port value can pass through solution Tcp RMI negotiation datas bag is analysed to obtain, finally by same serve port, same source IP, purpose IP, source MAC, purpose MAC TCP bags be judged as YES and produced with a pair of clients and service end.
3. the intelligent industrial-control network data integration method according to claim 1 parsed based on mirror port, it is characterised in that: The function code of each agreement different command of step (5) is also different, is needed to match different parsings calculations according to different function codes Method.
CN201611263227.0A 2016-12-30 2016-12-30 A kind of intelligent industrial-control network data integration method parsed based on mirror port Pending CN107046509A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201611263227.0A CN107046509A (en) 2016-12-30 2016-12-30 A kind of intelligent industrial-control network data integration method parsed based on mirror port

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201611263227.0A CN107046509A (en) 2016-12-30 2016-12-30 A kind of intelligent industrial-control network data integration method parsed based on mirror port

Publications (1)

Publication Number Publication Date
CN107046509A true CN107046509A (en) 2017-08-15

Family

ID=59543290

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201611263227.0A Pending CN107046509A (en) 2016-12-30 2016-12-30 A kind of intelligent industrial-control network data integration method parsed based on mirror port

Country Status (1)

Country Link
CN (1) CN107046509A (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109660532A (en) * 2018-12-14 2019-04-19 华南农业大学 A kind of distributed network data acquisition method and its acquisition system
CN110049037A (en) * 2019-04-15 2019-07-23 兰州理工大学 A kind of network video data acquisition methods based on data link layer
CN111277617A (en) * 2018-12-05 2020-06-12 陕西思科锐迪网络安全技术有限责任公司 Method for monitoring Siemens S7-PLC uploading and downloading program block
CN112799744A (en) * 2021-01-29 2021-05-14 北京索为系统技术股份有限公司 Calling method and device of industrial APP, computer readable medium and electronic equipment

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103780601A (en) * 2012-10-17 2014-05-07 北京力控华康科技有限公司 Method for automatically establishing Ethernet communication safety rules
CN104579818A (en) * 2014-12-01 2015-04-29 国家电网公司 Detection method of network anomaly message of intelligent substation
CN204967384U (en) * 2015-09-29 2016-01-13 王凤彦 Battery pack for electric tool
CN205583063U (en) * 2016-02-26 2016-09-14 冉柠恺 A lithium cell group for handing electric tool

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103780601A (en) * 2012-10-17 2014-05-07 北京力控华康科技有限公司 Method for automatically establishing Ethernet communication safety rules
CN104579818A (en) * 2014-12-01 2015-04-29 国家电网公司 Detection method of network anomaly message of intelligent substation
CN204967384U (en) * 2015-09-29 2016-01-13 王凤彦 Battery pack for electric tool
CN205583063U (en) * 2016-02-26 2016-09-14 冉柠恺 A lithium cell group for handing electric tool

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111277617A (en) * 2018-12-05 2020-06-12 陕西思科锐迪网络安全技术有限责任公司 Method for monitoring Siemens S7-PLC uploading and downloading program block
CN109660532A (en) * 2018-12-14 2019-04-19 华南农业大学 A kind of distributed network data acquisition method and its acquisition system
CN109660532B (en) * 2018-12-14 2021-08-24 华南农业大学 Distributed agricultural network data acquisition method and acquisition system thereof
CN110049037A (en) * 2019-04-15 2019-07-23 兰州理工大学 A kind of network video data acquisition methods based on data link layer
CN110049037B (en) * 2019-04-15 2021-12-14 兰州理工大学 Network video data acquisition method based on data link layer
CN112799744A (en) * 2021-01-29 2021-05-14 北京索为系统技术股份有限公司 Calling method and device of industrial APP, computer readable medium and electronic equipment
CN112799744B (en) * 2021-01-29 2024-05-07 北京索为系统技术股份有限公司 Industrial APP calling method and device, computer readable medium and electronic equipment

Similar Documents

Publication Publication Date Title
CN106254437B (en) Internet of Things communication means
CN107046509A (en) A kind of intelligent industrial-control network data integration method parsed based on mirror port
CN102096405B (en) Remote industrial network monitoring method and system based on S-Link and VLAN (Virtual Local Area Network) technique
CN110933146B (en) Data conversion method and device and server
CN104580222A (en) DDoS attack distributed detection and response system and method based on information entropy
CN105430113A (en) SDN APR message processing method and device, SDN controller and SDN switch
US20180285397A1 (en) Entity-centric log indexing with context embedding
CN107959715B (en) Remote terminal information identification software method based on wireless telecommunications
CN106230870B (en) Proprietary protocol document transmission system and method
KR101480126B1 (en) Network based high performance sap monitoring system and method
US11888900B2 (en) Cryptographic security audit using network service zone locking
CN102438017B (en) Routing function-based conversion apparatus of Modbus protocol and BACnet Ethernet protocol and conversion method thereof
CN108566369B (en) Data acquisition system and method based on industrial big data
CN202331135U (en) System for monitoring long-distance industrial network based on S-Link and VLAN (Virtual Local Area Network) technology
CN109740026A (en) Smart city edge calculations platform and its management method, server and storage medium
CN104243198B (en) A kind of network management and system based on network configuration protocol
CN101119374B (en) iSCSI communication method and corresponding initiation equipment and objective equipment
Franco et al. A review on current and old SCADA networks applied to water distribution systems
CN103944775A (en) Network traffic collection analysis and display output method
CN107426166A (en) A kind of acquisition methods of information, device and electronic equipment
CN109936566A (en) A kind of data transmission method system, device and computer readable storage medium
CN108400984B (en) MQTT message filtering method and system based on dynamic rule matching
CN105357130A (en) System for information transmission, and controller for information transmission
Faisal et al. Profiling communications in industrial ip networks: Model complexity and anomaly detection
CN103152195B (en) Collecting method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20170815

WD01 Invention patent application deemed withdrawn after publication