CN115134433B - Semantic analysis method, system and equipment of industrial control protocol and storage medium - Google Patents
Semantic analysis method, system and equipment of industrial control protocol and storage medium Download PDFInfo
- Publication number
- CN115134433B CN115134433B CN202210723745.5A CN202210723745A CN115134433B CN 115134433 B CN115134433 B CN 115134433B CN 202210723745 A CN202210723745 A CN 202210723745A CN 115134433 B CN115134433 B CN 115134433B
- Authority
- CN
- China
- Prior art keywords
- protocol
- field
- data
- data stream
- industrial control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000004458 analytical method Methods 0.000 title claims abstract description 99
- 238000004422 calculation algorithm Methods 0.000 claims abstract description 97
- 238000000034 method Methods 0.000 claims abstract description 41
- 230000011218 segmentation Effects 0.000 claims description 14
- 230000005540 biological transmission Effects 0.000 description 8
- 230000008569 process Effects 0.000 description 8
- 238000010586 diagram Methods 0.000 description 5
- 238000005538 encapsulation Methods 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 238000004590 computer program Methods 0.000 description 2
- 238000010276 construction Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 230000008901 benefit Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 239000002131 composite material Substances 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000018109 developmental process Effects 0.000 description 1
- 230000004069 differentiation Effects 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000010365 information processing Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 238000005192 partition Methods 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 238000000638 solvent extraction Methods 0.000 description 1
- 239000007858 starting material Substances 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/18—Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Communication Control (AREA)
Abstract
The embodiment of the invention provides a semantic analysis method, a semantic analysis system, semantic analysis equipment and a semantic analysis storage medium for an industrial control protocol, wherein the method comprises the following steps: identifying each data stream from the bus protocol stream by using a preset multi-mode matching algorithm, determining the protocol type of the data stream meeting the requirement of the preset protocol header format as an industrial Ethernet protocol type, determining the protocol type of the data stream not meeting the requirement of the preset protocol header format as a field bus protocol type, carrying out field division on each data stream by using a protocol format corresponding to the protocol type, carrying out semantic analysis on each field according to the protocol format to obtain a semantic analysis result of each field, obtaining an industrial human-computer interface, carrying out identification, obtaining industrial control data of each display area in the industrial human-computer interface, and determining the positions and meanings of area identification fields and variable data fields in each data stream based on the industrial control data and the industrial control data fields. The invention improves the resolution precision and the resolution efficiency of the industrial control protocol.
Description
Technical Field
The present invention relates to the field of information processing technologies, and in particular, to a semantic analysis method, a system, a device, and a storage medium for an industrial control protocol.
Background
With the development of information technology, the industrial internet (Industrial Internet) is widely used in the field of industrial control as an infrastructure for industrial digitization, networking and intelligent transformation. However, due to the industrial control protocol in the industrial internet, the number and the protocol complexity are far higher than those of the conventional ethernet protocol. The prior art is low in resolution precision and efficiency when the industrial control protocol is resolved by utilizing the resolution method based on the traditional Ethernet protocol. And because of low resolution precision and resolution efficiency of the industrial control protocol, the risk of data transmission delay of the industrial Internet can be caused, so that the operation reliability of each access device in the industrial Internet is affected. Therefore, how to improve the resolution accuracy and the resolution efficiency of the industrial control protocol has become a problem to be solved.
Disclosure of Invention
The embodiment of the invention aims to provide a semantic analysis method, a semantic analysis system, semantic analysis equipment and a semantic analysis storage medium for an industrial control protocol, so as to achieve the aim of improving analysis precision and analysis efficiency of the industrial control protocol. The specific technical scheme is as follows:
A semantic parsing method of an industrial control protocol, the semantic parsing method comprising:
identifying each data stream from the bus protocol stream according to the preset protocol header format requirement by utilizing a preset multi-mode matching algorithm, determining the protocol type of the data stream meeting the preset protocol header format requirement as an industrial Ethernet protocol type, and determining the protocol type of the data stream not meeting the preset protocol header format requirement as a field bus protocol type.
And carrying out field division on each data stream by using a protocol format corresponding to the protocol type, and carrying out semantic analysis on each field of each data stream according to the protocol format to obtain a semantic analysis result of each field.
The method comprises the steps of obtaining an industrial human-computer interface, identifying the industrial human-computer interface, obtaining industrial control data of each display area in the industrial human-computer interface, and determining the positions and meanings of an area identification field and a variable data field in each data stream based on the industrial control data and the industrial control data field, wherein the industrial control data field is a field with the data type of industrial control data in the semantic analysis result.
Optionally, the identifying each data stream from the bus protocol stream according to the preset protocol header format requirement by using a preset multi-mode matching algorithm, determining a protocol type of the data stream meeting the preset protocol header format requirement as an industrial ethernet protocol type, and determining a protocol type of the data stream not meeting the preset protocol header format requirement as a fieldbus protocol type, including:
For each of the bus protocol streams:
judging whether the data stream contains protocol header data or not by utilizing the preset multi-mode matching algorithm, if yes, determining the industrial Ethernet protocol type matched with the protocol header data of the data stream as the protocol type of the data stream in the preset protocol header format requirement.
In case the data stream does not contain said protocol header data, the protocol type of the data stream is determined as a field bus protocol type.
Optionally, when the protocol type of the data stream is the industrial ethernet protocol type, the using a protocol format corresponding to the protocol type to divide the fields of each data stream, and performing semantic analysis on each field of each data stream according to the protocol format to obtain a semantic analysis result of each field includes:
for each data stream of which the protocol type is the industrial ethernet protocol type:
and calculating the information entropy of each byte in the data stream and the mutual information quantity between adjacent bytes by using a preset character string segmentation algorithm, and determining each segmentation point of the data stream according to the information entropy and the mutual information quantity.
The data stream is divided into a plurality of fields according to the respective division points.
And obtaining a protocol format matched with the Ethernet protocol flow identifier according to the Ethernet protocol flow identifier in the protocol type of the data flow.
For each field: and determining a first semantic analysis result of each field according to the protocol format matched with the Ethernet protocol flow identification by using a preset reverse analysis algorithm, wherein the first semantic analysis result comprises the semantics and the data type of each field.
Optionally, in the case that the protocol type of the data stream is the fieldbus protocol type, the method further includes:
for each data stream of which the protocol type is the fieldbus protocol type:
and determining a bus protocol stream identifier of the data stream according to the byte length of the data stream, and obtaining a protocol format matched with the bus protocol stream identifier.
And dividing the data stream into a control command field, a protocol data field and an ending character field according to the protocol format matched with the bus protocol stream identification by using a preset byte semantic inference algorithm.
Determining each sub-field in the protocol data field according to the protocol format matched with the bus protocol flow identifier by using the preset byte semantic inference algorithm, and carrying out semantic analysis on the control command field, each sub-field and the terminator field to obtain a second semantic analysis result of each field and each sub-field, wherein the second semantic analysis result comprises the semantics and the data type of each field or each sub-field.
Optionally, the obtaining an industrial human-machine interface, identifying the industrial human-machine interface, obtaining industrial control data of each display area in the industrial human-machine interface, and determining positions and meanings of an area identification field and a variable data field in each data stream based on the industrial control data and the industrial control data field, including:
and obtaining industrial control data of each display area in the industrial human-computer interface by using a preset image recognition algorithm.
Industrial control data for each display area:
and acquiring a target data stream according to the industrial control data of the display area, wherein the target data stream is a data stream with a field matched with the data code of the industrial control data of the display area.
And carrying out sequence comparison on a constant data sequence in the industrial control data of the display area and the industrial control data field of the target data stream by using a preset sequence comparison algorithm, determining a field with the same comparison in the industrial control data field as the area identification field, and determining the meaning of the constant data sequence identified by the preset image identification algorithm as the meaning of the area identification field.
And carrying out sequence comparison on a non-constant data sequence in the industrial control data of the display area and an industrial control data field of the target data stream by using the preset sequence comparison algorithm, determining a consistent comparison field in the industrial control data field as the variable data field, and determining the meaning of the non-constant data sequence identified by the preset image identification algorithm as the meaning of the variable data field.
A semantic parsing system of an industrial control protocol, the semantic parsing system comprising:
the protocol type determining unit is used for identifying each data stream from the bus protocol streams according to the preset protocol header format requirement by utilizing a preset multi-mode matching algorithm, determining the protocol type of the data stream meeting the preset protocol header format requirement as an industrial Ethernet protocol type, and determining the protocol type of the data stream not meeting the preset protocol header format requirement as a field bus protocol type.
The field semantic analysis unit is used for dividing the fields of the data streams by using a protocol format corresponding to the protocol type, and carrying out semantic analysis on the fields of each data stream according to the protocol format to obtain semantic analysis results of the fields.
The key field determining unit is used for obtaining an industrial human-computer interface, identifying the industrial human-computer interface, obtaining industrial control data of each display area in the industrial human-computer interface, and determining the positions and meanings of an area identification field and a variable data field in each data stream based on the industrial control data and the industrial control data field, wherein the industrial control data field is a field with the type of industrial control data in the semantic analysis result.
Optionally, the protocol type determining unit is configured to:
for each of the bus protocol streams:
judging whether the data stream contains protocol header data, if so, determining the industrial Ethernet protocol type matched with the protocol header data of the data stream as the protocol type of the data stream in the preset protocol header format requirement.
In case the data stream does not contain said protocol header data, the protocol type of the data stream is determined as a field bus protocol type.
Optionally, in case the protocol type of the data stream is the industrial ethernet protocol type, the field semantic parsing unit is configured to:
for each data stream of which the protocol type is the industrial ethernet protocol type:
and calculating the information entropy of each byte in the data stream and the mutual information quantity between adjacent bytes by using a preset character string segmentation algorithm, and determining each segmentation point of the data stream according to the information entropy and the mutual information quantity.
The data stream is divided into a plurality of fields according to the respective division points.
And obtaining a protocol format matched with the Ethernet protocol flow identifier according to the Ethernet protocol flow identifier in the protocol type of the data flow.
For each field: and determining a first semantic analysis result of each field according to the protocol format matched with the Ethernet protocol flow identification by using a preset reverse analysis algorithm, wherein the first semantic analysis result comprises the semantics and the data type of each field.
Optionally, in case the protocol type of the data stream is the fieldbus protocol type, the field semantic parsing unit is further configured to:
for each data stream of which the protocol type is the fieldbus protocol type:
and determining a bus protocol stream identifier of the data stream according to the byte length of the data stream, and obtaining a protocol format matched with the bus protocol stream identifier.
And dividing the data stream into a control command field, a protocol data field and an ending character field according to the protocol format matched with the bus protocol stream identification by using a preset byte semantic inference algorithm.
Determining each sub-field in the protocol data field according to the protocol format matched with the bus protocol flow identifier by using the preset byte semantic inference algorithm, and carrying out semantic analysis on the control command field, each sub-field and the terminator field to obtain a second semantic analysis result of each field and each sub-field, wherein the second semantic analysis result comprises the semantics and the data type of each field or each sub-field.
Optionally, the key field determining unit is configured to:
and obtaining industrial control data of each display area in the industrial human-computer interface by using a preset image recognition algorithm.
Industrial control data for each display area:
and acquiring a target data stream according to the industrial control data of the display area, wherein the target data stream is a data stream with a field matched with the data code of the industrial control data of the display area.
And carrying out sequence comparison on a constant data sequence in the industrial control data of the display area and the industrial control data field of the target data stream by using a preset sequence comparison algorithm, determining a field with the same comparison in the industrial control data field as the area identification field, and determining the meaning of the constant data sequence identified by the preset image identification algorithm as the meaning of the area identification field.
And carrying out sequence comparison on a non-constant data sequence in the industrial control data of the display area and an industrial control data field of the target data stream by using the preset sequence comparison algorithm, determining a consistent comparison field in the industrial control data field as the variable data field, and determining the meaning of the non-constant data sequence identified by the preset image identification algorithm as the meaning of the variable data field.
A semantic parsing apparatus of an industrial control protocol, the semantic parsing apparatus comprising:
a processor;
a memory for storing the processor-executable instructions.
Wherein the processor is configured to execute the instructions to implement the semantic parsing method of the industrial control protocol according to any one of the above.
A computer readable storage medium, which when executed by a processor of a semantic parsing device of an industrial control protocol, causes the semantic parsing device to perform the semantic parsing method of an industrial control protocol as claimed in any one of the preceding claims.
The semantic analysis method, the semantic analysis system, the semantic analysis equipment and the semantic analysis storage medium for the industrial control protocol can set the format requirements of the protocol header by introducing a preset multi-mode matching algorithm and based on the structure and the type of the industrial control protocol encapsulation header. The method can efficiently identify a plurality of data streams meeting the requirements of the preset protocol header format from a large number of bus protocol streams, and accurately determine the protocol type of each data stream. Meanwhile, the protocol format for generating the data stream is determined through the protocol type, and field division and semantic analysis are carried out on the data stream according to the protocol format, so that the accurate analysis of the semantic of each field in the same data stream is realized. Finally, the numerical value of the industrial control data is compared with the industrial control data field in the data stream by acquiring the industrial control data of each display area, so that the method and the device realize accurate analysis of the field with undefined meaning and position in the data stream compared with the prior art. Therefore, the invention achieves the aim of improving the analysis precision and the analysis efficiency of the industrial control protocol.
Of course, it is not necessary for any one product or method of practicing the invention to achieve all of the advantages set forth above at the same time.
Drawings
In order to more clearly illustrate the embodiments of the invention or the technical solutions in the prior art, the drawings that are required in the embodiments or the description of the prior art will be briefly described, it being obvious that the drawings in the following description are only some embodiments of the invention, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
Fig. 1 is a flowchart of a semantic parsing method of an industrial control protocol according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of a data structure of a preset multi-pattern matching algorithm according to an alternative embodiment of the present invention;
FIG. 3 is a schematic diagram of field partitioning and semantic parsing of an industrial Ethernet protocol type data stream according to another alternative embodiment of the present invention;
FIG. 4 is a schematic diagram of an industrial human-machine interface provided by another alternative embodiment of the present invention;
FIG. 5 is a block diagram of a system provided by another alternative embodiment of the present invention;
fig. 6 is a block diagram of an apparatus provided by another alternative embodiment of the present invention.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The embodiment of the invention provides a semantic analysis method of an industrial control protocol, as shown in fig. 1, comprising the following steps:
s101, identifying each data stream from the bus protocol stream according to the preset protocol header format requirement by utilizing a preset multi-mode matching algorithm, determining the protocol type of the data stream meeting the preset protocol header format requirement as an industrial Ethernet protocol type, and determining the protocol type of the data stream not meeting the preset protocol header format requirement as a field bus protocol type.
Alternatively, in an alternative embodiment of the present invention, the preset multi-pattern matching algorithm may be an algorithm constructed based on a multi-pattern matching algorithm (multi-pattern matching algorithm) according to a protocol header format of the industrial ethernet protocol. Because the industrial control protocol has higher data volume and transmission efficiency than the common communication protocol in the transmission process, the protocol formats of different industrial control protocols are greatly different. The prior art cannot realize accurate and efficient identification of different industrial control protocols in the application scene of large-scale data transmission. The multi-mode matching algorithm is an algorithm provided for the large-scale multi-keyword matching problem. Therefore, the invention can accurately and efficiently identify a plurality of data streams meeting the requirements of the preset protocol header format from a large number of bus protocol streams by introducing the preset multi-mode matching algorithm.
Alternatively, in another alternative embodiment of the present invention, the Fieldbus protocol is an industrial control protocol for transmitting control signals between machine devices in a factory. The industrial ethernet protocol is a communication protocol for transmitting other types of data while transmitting control signals. Because of the industrial ethernet protocol type of data stream, it is more industrial control protocol encapsulation header in data structure than the fieldbus protocol type of data stream. Therefore, the invention can realize the accurate identification of the data streams of different protocol types by setting the format requirements of the protocol header based on the structure and the type of the industrial control protocol encapsulation header.
Alternatively, in another alternative embodiment of the present invention, the specific types of Fieldbus protocol types described above may be varied, such as a controller area network (Controller Area Network, CAN) protocol, a process Fieldbus (Process Field Bus, profibus) protocol, and the like.
Alternatively, in an alternative embodiment of the present invention, the specific types of the industrial EtherNet protocol may be various, such as Transmission control protocol (Transmission ControlProtocol, TCP), industrial EtherNet protocol (EtherNet IndustrialProtocol, etherNet/IP), and so on.
Optionally, in another optional embodiment of the present invention, in an actual application scenario, the implementation manner of determining the protocol type of each data stream may be that, when determining a specific protocol type of each data stream, a corresponding electronic tag is generated according to the protocol type.
S102, carrying out field division on each data stream by using a protocol format corresponding to the protocol type, and carrying out semantic analysis on each field of each data stream according to the protocol format to obtain a semantic analysis result of each field.
The protocol format refers to a frame format (frame format) that is a format of frames specified according to different protocols. The fields at different locations characterize different meanings in the data stream due to different industrial control protocols. And for the data stream generated by the same industrial control protocol, the character string length can change along with the data information quantity carried by the data stream. However, the industrial control protocol may be used for differentiation by adding separation identifiers before characterizing the character strings of different data types. Therefore, the protocol format for generating the data stream is determined through the protocol type, and the data stream is subjected to field division and semantic analysis according to the protocol format, so that the accurate analysis of the semantics of each field in the same data stream is realized.
Alternatively, in an optional embodiment of the present invention, the content of the semantic parsing result may be the meaning of the field, the data type of the data represented by the field, and so on.
S103, an industrial human-computer interface is obtained, industrial human-computer interface identification is carried out, industrial control data of each display area in the industrial human-computer interface is obtained, and the positions and meanings of the area identification field and the variable data field in each data stream are determined based on the industrial control data and the industrial control data field, wherein the industrial control data field is a field with the data type being industrial control data in a semantic analysis result.
The Industrial human-machine interface (Industrial Human Machine Interface, industrial HMI) is generated by human-machine interface configuration software applied to the Industrial control field and is used for human-machine interaction and control.
Optionally, in an optional embodiment of the present invention, the foregoing implementation of identifying an industrial human-machine interface to obtain industrial control data of each display area in the industrial human-machine interface may be implemented by performing regional collection on image data in the industrial human-machine interface through a preset image identification algorithm.
Optionally, in another optional embodiment of the present invention, since the image content displayed by the industrial man-machine interface is important industrial control data such as an operation state or an operation parameter, which affects the operation reliability of the device. Since these industrial control data are often in a varying state. So that the industrial control protocol will not embody the specific meaning and position of the corresponding field of the industrial control data in the data stream, and only display the numerical value of the corresponding field. The existing analysis method can only analyze the field with specific meaning set in the industrial control protocol. Therefore, the invention can realize accurate analysis of the field with undefined meaning and position in the data stream compared with the prior art by acquiring the industrial control data of each display area and comparing the numerical value of the industrial control data with the industrial control data field in the data stream.
The invention sets the protocol header format requirement by introducing a preset multi-mode matching algorithm and based on the structure and the type of the industrial control protocol encapsulation header. The method can efficiently identify a plurality of data streams meeting the requirements of the preset protocol header format from a large number of bus protocol streams, and accurately determine the protocol type of each data stream. Meanwhile, the protocol format for generating the data stream is determined through the protocol type, and field division and semantic analysis are carried out on the data stream according to the protocol format, so that the accurate analysis of the semantic of each field in the same data stream is realized. Finally, the numerical value of the industrial control data is compared with the industrial control data field in the data stream by acquiring the industrial control data of each display area, so that the method and the device realize accurate analysis of the field with undefined meaning and position in the data stream compared with the prior art. Therefore, the invention achieves the aim of improving the analysis precision and the analysis efficiency of the industrial control protocol.
Optionally, by using a preset multi-mode matching algorithm, identifying each data stream from the bus protocol stream according to a preset protocol header format requirement, determining a protocol type of the data stream meeting the preset protocol header format requirement as an industrial ethernet protocol type, and determining a protocol type of the data stream not meeting the preset protocol header format requirement as a field bus protocol type, including:
For each data stream in the bus protocol stream:
judging whether the data stream contains protocol header data or not by using a preset multi-mode matching algorithm, if so, determining the industrial Ethernet protocol type matched with the protocol header data of the data stream as the protocol type of the data stream in the preset protocol header format requirement.
In the case that the data stream does not contain protocol header data, the protocol type of the data stream is determined as a field bus protocol type.
It should be noted that, in the practical application scenario, there are various embodiments for determining whether the data stream includes protocol header data and determining the protocol type of the data stream by using the preset multi-mode matching algorithm. An exemplary embodiment of the present invention provides:
for convenience of description, a multimode matching AC (Aho-cornick) algorithm is adopted as the above-mentioned preset multimode matching algorithm in this example, and the data structure thereof is shown in fig. 2.
The current data streams to be identified are set to be Q1, Q2, Q3, Q4 and Q5 respectively. Wherein, the string of the data stream Q1 is expressed as: 00 18 20. The string of data stream Q2 is represented as: 00 20 30. The string of data stream Q3 is represented as: 04 20 30. The string of data stream Q4 is represented as: 00 20 26. The string of data stream Q5 is represented as: 13 27 46.
Referring to fig. 2, the process of performing header recognition on the Q1, Q2, Q3, Q4 and Q5 using the multimode matching AC algorithm is as follows:
the first characters of Q1, Q2, and Q4 are all "00". The first character of Q3 is "04". And the first characters of Q1, Q2, Q3 and Q4 all have matching terms in the multi-pattern matching AC algorithm described above. Thus, the second characters of Q1, Q2, Q3, and Q4 can be recognized. And the first type codes of Q1, Q2, and Q4 are determined to be "1". The first type of coding of Q3 is determined to be "6".
It should be noted that, the data "00-1", "20-2", "30-3" and the like shown in fig. 2 are characterized by specific numerical values of characters at different positions in the data stream. For example, "00-1" indicates that the value of the first character is 00, and "30-3" indicates that the value of the third character is 30. The invention will not be described in detail.
It should be noted that, the numbers inside the circles in fig. 2 represent the meaning of the type codes corresponding to the character positions. This type code may be used to determine the specific industrial ethernet protocol type of the data stream. In the figure, root inside the circle is a virtual Root user, and is used for determining the protocol type of each data stream.
The first character of data stream Q5 does not have a match in the multimode matching AC algorithm described above. Therefore, the above-described multimode matching AC algorithm determines that the data stream Q5 does not contain protocol header data, and determines the protocol type of the data stream Q5 as a fieldbus protocol type.
It should be noted that there are a variety of specific types of fieldbus protocols. Therefore, the above multi-mode matching AC algorithm can only determine that the protocol type of the data stream Q5 is the fieldbus protocol type, but cannot determine which specific type of the fieldbus protocol the data stream Q5 belongs to.
Upon recognition of the second character of Q1, Q2, Q3, and Q4, the second character of Q1 is "18". The second characters of Q2, Q3, and Q4 are all "20". However, the first character of Q2 and Q4 is not identical to the first character of Q3. Thus, the second type of encoding of Q1 is determined to be "2". The second type of encoding of Q2 and Q4 is determined to be "4". The second type of encoding of Q3 is determined to be "7".
Upon recognition of the third character of Q1, Q2, Q3, and Q4, the third character of Q1 is "20". The third character of Q2 and Q3 is "30". The third character of Q4 is "26". Thus, the third type of encoding of Q1 is determined to be "3". The third type of encoding of Q2 is determined to be "5". The third type of coding for Q3 is determined to be "8". The third type of coding of Q4 is determined to be "9".
Since each of the position characters of Q1, Q2, Q3 and Q4 has a matching term in the above multi-pattern matching AC algorithm. Thus, the protocol types for Q1, Q2, Q3, and Q4 are all determined to be industrial ethernet protocols. And from the first through third type encodings of each data stream, a composite type encoding of each data stream may be determined. Wherein the integrated type code of Q1 is "123". The integrated type code for Q2 is "145". The integrated type code for Q3 is "678". The integrated type code for Q4 is "149". The specific industrial Ethernet protocol type of each data stream is determined according to the comprehensive type code of each data stream.
Optionally, when the protocol type of the data stream is an industrial ethernet protocol type, using a protocol format corresponding to the protocol type to perform field division on each data stream, and performing semantic analysis on each field of each data stream according to the protocol format to obtain a semantic analysis result of each field, where the method includes:
for each data stream with protocol type of industrial Ethernet protocol type:
and calculating the information entropy of each byte in the data stream and the mutual information quantity between adjacent bytes by using a preset character string segmentation algorithm, and determining each segmentation point of the data stream according to the information entropy and the mutual information quantity.
The data stream is divided into a plurality of fields according to the division points.
And obtaining a protocol format matched with the Ethernet protocol flow identifier according to the Ethernet protocol flow identifier in the protocol type of the data flow.
For each field: and determining a first semantic analysis result of each field according to the protocol format matched with the Ethernet protocol flow identification by using a preset reverse analysis algorithm, wherein the first semantic analysis result comprises the semantics and the data type of each field.
Optionally, in an optional embodiment of the present invention, the implementation manner of field division and semantic parsing on the industrial ethernet protocol type data stream may be:
Please refer to fig. 3.d, d 1 To d n Is the byte position of the data stream. Calculating information entropy H (d) of bytes at each byte position using a preset information entropy algorithm j ). Calculating the mutual information quantity MIS (d) between adjacent bytes according to the information entropy of the adjacent two bytes by using a preset mutual information quantity calculation algorithm j-1 ，d j ). Judging whether the mutual information quantity between adjacent bytes is smaller than a preset segmentation threshold value, if not, determining thatA partition point g needs to be set between two adjacent bytes. For example, MIS (d) in FIG. 3 is set j-1 ，d j ) Not less than a preset segmentation threshold. Setting the division d j-1 And d j Mutual information quantity of other adjacent bytes than MIS (d) 1 ，d 2 )、MIS(d n-1 ，d n ) And the like are smaller than a preset segmentation threshold value. Then at d j-1 And d j A label whose content is the dividing point g is added. Labels with content of continuous l are added at other nodes.
Optionally, the preset character string segmentation algorithm may be a combination algorithm formed by the preset information entropy algorithm and a preset mutual information quantity calculation algorithm.
And then dividing according to the label content to obtain two fields: f (f) 1 And f 2 。
As a result of the above steps, the specific industrial ethernet protocol type of the data stream has been clarified. The protocol format for the protocol type is invoked according to the ethernet protocol flow identification. And the protocol format should also consist of two fields. Then utilizing preset reverse analysis algorithm to make the above-mentioned field f according to the semantics and data type of every field in the protocol format 1 And f 2 And carrying out semantic analysis. For example: in the protocol format, the semantics of the first field are device identification, and the data type is text data. The semantics of the second field are device parameters and the data type is dynamic data. The semantics and data type of the first field are determined as field f 1 Is a result of the first semantic parsing. Determining the semantics and the data type of the second field as field f 2 Is a result of the first semantic parsing.
Alternatively, in an alternative embodiment of the present invention, the ethernet protocol flow identifier may be a tag for determining a specific protocol type.
It will be appreciated by those skilled in the art that the above-mentioned preset information entropy algorithm and preset mutual information amount calculation algorithm may be formulated according to the related concepts and calculation formulas of the information entropy mutual information in the information theory. The specific construction process of the two algorithms is not excessively limited and repeated.
Optionally, in the case that the protocol type of the data stream is a fieldbus protocol type, the method further includes:
for each data stream with a protocol type of field bus protocol type:
and determining a bus protocol stream identifier of the data stream according to the byte length of the data stream, and obtaining a protocol format matched with the bus protocol stream identifier.
The data stream is divided into a control command field, a protocol data field and an ending character field according to a protocol format matched with the bus protocol stream identification by using a preset byte semantic inference algorithm.
Determining each sub-field in the protocol data field according to the protocol format matched with the bus protocol flow identification by using a preset byte semantic inference algorithm, and carrying out semantic analysis on the control command field, each sub-field and the ending character field to obtain a second semantic analysis result of each field and each sub-field, wherein the second semantic analysis result comprises the semantics and the data type of each field or each sub-field.
Alternatively, in another alternative embodiment of the present invention, due to the field bus protocol type data stream structure, it is typically "Starter+control Command field+protocol data field+terminator field". And the length of each field is relatively fixed. Thus, by the byte length described above, the particular Fieldbus protocol type of the data stream can be determined.
It will be appreciated by those skilled in the art that the preset byte semantic inference algorithm may be constructed by using existing Java code that extracts a character string based on a set byte length. The construction process of the preset byte semantic inference algorithm is not excessively limited and repeated.
Optionally, the method includes obtaining an industrial human-computer interface, identifying the industrial human-computer interface, obtaining industrial control data of each display area in the industrial human-computer interface, and determining positions and meanings of an area identification field and a variable data field in each data stream based on the industrial control data and the industrial control data field, including:
and obtaining industrial control data of each display area in the industrial human-computer interface by using a preset image recognition algorithm.
Industrial control data for each display area:
and acquiring a target data stream according to the industrial control data of the display area, wherein the target data stream is a data stream with a field matched with the data code of the industrial control data of the display area.
And carrying out sequence comparison on the constant data sequence in the industrial control data of the display area and the industrial control data field of the target data stream by using a preset sequence comparison algorithm, determining a field with the same comparison in the industrial control data field as an area identification field, and determining the meaning of the constant data sequence identified by a preset image identification algorithm as the meaning of the area identification field.
And carrying out sequence comparison on the non-constant data sequence in the industrial control data of the display area and the industrial control data field of the target data stream by using a preset sequence comparison algorithm, determining a consistent comparison field in the industrial control data field as a variable data field, and determining the meaning of the non-constant data sequence identified by a preset image identification algorithm as the meaning of the variable data field.
In practical applications, the above embodiments for determining the positions and meanings of the region identification field and the variable data field in each data stream based on the industrial control data and the industrial control data field are various, and an exemplary embodiment is provided herein:
as shown in fig. 4, an industrial human-machine interface 401 is provided for monitoring the internal operating conditions of the boiler. The industrial human-computer interface 401 is subjected to image recognition by using a preset image recognition algorithm, so as to obtain a plurality of display areas and industrial control data thereof. Wherein: region 402 is the boiler body. Region 403 is a pressure valve.
For convenience of description, the target data stream a of the area 402 and the target data stream B of the area 403 are set. The target data stream a includes two fields, the meaning of the field a is the device type, and the meaning of the field b is the device number. The target data stream B contains four fields, the meaning of field c is the instrument class, the meaning of field t is the value 1, the meaning of field t is the value 2, and the meaning of field f is the value 3.
Then for region 402 a constant data sequence consisting of the equipment type boiler and the equipment number boiler number one, the sequence of fields of which corresponds to the two fields of the target data stream a, respectively. The meaning of field a of the target data stream a is determined as boiler equipment and the meaning of field b is determined as boiler number according to the above constant data sequence.
For the region 403, the industrial control data of the region obtained after image recognition includes the instrument class of the pressure valve and the "11MPa" furnace pressure value. Wherein the pressure valve is of constant data and the pressure value in the furnace is of fluctuating non-constant data. Thus, after the above comparison, the field c in the target data stream B is determined to mean a pressure valve. The meaning of the field in the target data stream B is determined as in-furnace pressure from field to field. And the field D is located after the field C to the field position of the field D.
Corresponding to the above method embodiment, the present invention further provides a semantic analysis system of an industrial control protocol, as shown in fig. 5, where the semantic analysis system includes:
the protocol type determining unit 501 uses a preset multi-mode matching algorithm to identify each data stream from the bus protocol streams according to the preset protocol header format requirement, determine the protocol type of the data stream meeting the preset protocol header format requirement as an industrial ethernet protocol type, and determine the protocol type of the data stream not meeting the preset protocol header format requirement as a field bus protocol type.
The field semantic analysis unit 502 performs field division on each data stream by using a protocol format corresponding to the protocol type, and performs semantic analysis on each field of each data stream according to the protocol format, so as to obtain a semantic analysis result of each field.
The key field determining unit 503 is configured to obtain an industrial human-computer interface, identify the industrial human-computer interface, obtain industrial control data of each display area in the industrial human-computer interface, and determine a position and a meaning of an area identification field and a variable data field in each data stream based on the industrial control data and the industrial control data field, where the industrial control data field is a field of which the data type is industrial control data in the semantic analysis result.
Optionally, the protocol type determining unit 501 is configured to:
for each data stream in the bus protocol stream:
judging whether the data stream contains protocol header data or not by using a preset multi-mode matching algorithm, if so, determining the industrial Ethernet protocol type matched with the protocol header data of the data stream as the protocol type of the data stream in the preset protocol header format requirement.
In the case that the data stream does not contain protocol header data, the protocol type of the data stream is determined as a field bus protocol type.
Alternatively, in the case that the protocol type of the data stream is an industrial ethernet protocol type, the above-mentioned field semantic parsing unit 502 is set to:
for each data stream with protocol type of industrial Ethernet protocol type:
And calculating the information entropy of each byte in the data stream and the mutual information quantity between adjacent bytes by using a preset character string segmentation algorithm, and determining each segmentation point of the data stream according to the information entropy and the mutual information quantity.
The data stream is divided into a plurality of fields according to the division points.
And obtaining a protocol format matched with the Ethernet protocol flow identifier according to the Ethernet protocol flow identifier in the protocol type of the data flow.
For each field: and determining a first semantic analysis result of each field according to the protocol format matched with the Ethernet protocol flow identification by using a preset reverse analysis algorithm, wherein the first semantic analysis result comprises the semantics and the data type of each field.
Optionally, in the case that the protocol type of the data stream is a fieldbus protocol type, the field semantic parsing unit 502 is further configured to:
for each data stream with a protocol type of field bus protocol type:
and determining a bus protocol stream identifier of the data stream according to the byte length of the data stream, and obtaining a protocol format matched with the bus protocol stream identifier.
The data stream is divided into a control command field, a protocol data field and an ending character field according to a protocol format matched with the bus protocol stream identification by using a preset byte semantic inference algorithm.
Determining each sub-field in the protocol data field according to the protocol format matched with the bus protocol flow identification by using a preset byte semantic inference algorithm, and carrying out semantic analysis on the control command field, each sub-field and the ending character field to obtain a second semantic analysis result of each field and each sub-field, wherein the second semantic analysis result comprises the semantics and the data type of each field or each sub-field.
Alternatively, the key field determining unit 503 is set to:
and obtaining industrial control data of each display area in the industrial human-computer interface by using a preset image recognition algorithm.
Industrial control data for each display area:
and acquiring a target data stream according to the industrial control data of the display area, wherein the target data stream is a data stream with a field matched with the data code of the industrial control data of the display area.
And carrying out sequence comparison on the constant data sequence in the industrial control data of the display area and the industrial control data field of the target data stream by using a preset sequence comparison algorithm, determining a field with the same comparison in the industrial control data field as an area identification field, and determining the meaning of the constant data sequence identified by a preset image identification algorithm as the meaning of the area identification field.
And carrying out sequence comparison on the non-constant data sequence in the industrial control data of the display area and the industrial control data field of the target data stream by using a preset sequence comparison algorithm, determining a consistent comparison field in the industrial control data field as a variable data field, and determining the meaning of the non-constant data sequence identified by a preset image identification algorithm as the meaning of the variable data field.
The embodiment of the invention also provides a semantic analysis device of the industrial control protocol, as shown in fig. 6, the semantic analysis device comprises:
a processor 601;
a memory 602 for storing instructions executable by the processor 601.
Wherein the processor 601 is configured to execute instructions to implement the semantic parsing method of any one of the industrial control protocols described above and shown in fig. 1.
The embodiment of the invention also provides a computer readable storage medium, when the instructions in the computer readable storage medium are executed by a processor of the industrial control protocol semantic analysis device, the semantic analysis device can execute the industrial control protocol semantic analysis method shown in any one of the above figures 1.
The memory may include volatile memory, random Access Memory (RAM), and/or nonvolatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM), among other forms in computer readable media, the memory including at least one memory chip. Memory is an example of a computer-readable medium.
Computer readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of storage media for a computer include, but are not limited to, phase change memory (PRAM), static Random Access Memory (SRAM), dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium, which can be used to store information that can be accessed by a computing device. Computer-readable media, as defined herein, does not include transitory computer-readable media (transmission media), such as modulated data signals and carrier waves.
It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
It is noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article or apparatus that comprises an element.
In this specification, each embodiment is described in a related manner, and identical and similar parts of each embodiment are all referred to each other, and each embodiment mainly describes differences from other embodiments. In particular, for system embodiments, since they are substantially similar to method embodiments, the description is relatively simple, as relevant to see a section of the description of method embodiments.
The foregoing is merely exemplary of the present application and is not intended to limit the present application. Various modifications and changes may be made to the present application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. which are within the spirit and principles of the present application are intended to be included within the scope of the claims of the present application.
Claims (10)
1. The semantic analysis method of the industrial control protocol is characterized by comprising the following steps of:
identifying each data stream from the bus protocol stream according to the preset protocol header format requirement by utilizing a preset multi-mode matching algorithm, determining the protocol type of the data stream meeting the preset protocol header format requirement as an industrial Ethernet protocol type, and determining the protocol type of the data stream not meeting the preset protocol header format requirement as a field bus protocol type;
performing field division on each data stream by using a protocol format corresponding to the protocol type, and performing semantic analysis on each field of each data stream according to the protocol format to obtain a semantic analysis result of each field;
the method comprises the steps of obtaining an industrial human-computer interface, identifying the industrial human-computer interface, obtaining industrial control data of each display area in the industrial human-computer interface, and determining the positions and meanings of an area identification field and a variable data field in each data stream based on the industrial control data and the industrial control data field, wherein the industrial control data field is a field with the data type of industrial control data in the semantic analysis result.
2. The method according to claim 1, wherein the identifying each data stream from the bus protocol streams using a predetermined multi-pattern matching algorithm according to a predetermined protocol header format requirement, determining a protocol type of the data stream satisfying the predetermined protocol header format requirement as an industrial ethernet protocol type, and determining a protocol type of the data stream not satisfying the predetermined protocol header format requirement as a fieldbus protocol type includes:
for each of the bus protocol streams:
judging whether the data stream contains protocol header data or not by utilizing the preset multi-mode matching algorithm, if yes, determining the industrial Ethernet protocol type matched with the protocol header data of the data stream as the protocol type of the data stream in the preset protocol header format requirement;
in case the data stream does not contain said protocol header data, the protocol type of the data stream is determined as a field bus protocol type.
3. The method according to claim 2, wherein, in the case that the protocol type of the data stream is the industrial ethernet protocol type, the using a protocol format corresponding to the protocol type to field-divide each data stream, and performing semantic parsing on each field of each data stream according to the protocol format, to obtain a semantic parsing result of each field includes:
For each data stream of which the protocol type is the industrial ethernet protocol type:
calculating information entropy of each byte in the data stream and mutual information quantity between adjacent bytes by using a preset character string segmentation algorithm, and determining each segmentation point of the data stream according to the information entropy and the mutual information quantity;
dividing the data stream into a plurality of fields according to each division point;
according to the Ethernet protocol flow identification in the protocol type of the data flow, obtaining a protocol format matched with the Ethernet protocol flow identification;
for each field: and determining a first semantic analysis result of each field according to the protocol format matched with the Ethernet protocol flow identification by using a preset reverse analysis algorithm, wherein the first semantic analysis result comprises the semantics and the data type of each field.
4. A method according to claim 3, wherein in case the protocol type of the data stream is the fieldbus protocol type, further comprising:
for each data stream of which the protocol type is the fieldbus protocol type:
determining a bus protocol stream identifier of the data stream according to the byte length of the data stream, and obtaining a protocol format matched with the bus protocol stream identifier;
Dividing the data stream into a control command field, a protocol data field and an ending symbol field according to the protocol format matched with the bus protocol stream identifier by using a preset byte semantic inference algorithm;
determining each sub-field in the protocol data field according to the protocol format matched with the bus protocol flow identifier by using the preset byte semantic inference algorithm, and carrying out semantic analysis on the control command field, each sub-field and the terminator field to obtain a second semantic analysis result of each field and each sub-field, wherein the second semantic analysis result comprises the semantics and the data type of each field or each sub-field.
5. The method of claim 1, wherein the obtaining the industrial human-machine interface, identifying the industrial human-machine interface, obtaining industrial control data for each display area in the industrial human-machine interface, and determining the location and meaning of the area identification field and the variable data field in each data stream based on the industrial control data and the industrial control data field comprises:
acquiring industrial control data of each display area in the industrial human-computer interface by using a preset image recognition algorithm;
Industrial control data for each display area:
acquiring a target data stream according to the industrial control data of the display area, wherein the target data stream is a data stream with a field matched with the data code of the industrial control data of the display area;
using a preset sequence comparison algorithm to perform sequence comparison on a constant data sequence in the industrial control data of the display area and an industrial control data field of the target data stream, determining a comparison consistent field in the industrial control data field as the area identification field, and determining the meaning of the constant data sequence identified by the preset image identification algorithm as the meaning of the area identification field;
and carrying out sequence comparison on a non-constant data sequence in the industrial control data of the display area and an industrial control data field of the target data stream by using the preset sequence comparison algorithm, determining a consistent comparison field in the industrial control data field as the variable data field, and determining the meaning of the non-constant data sequence identified by the preset image identification algorithm as the meaning of the variable data field.
6. A semantic parsing system of an industrial control protocol, the semantic parsing system comprising:
The protocol type determining unit is used for identifying each data stream from the bus protocol streams according to the preset protocol header format requirements by using a preset multi-mode matching algorithm, determining the protocol type of the data stream meeting the preset protocol header format requirements as an industrial Ethernet protocol type, and determining the protocol type of the data stream not meeting the preset protocol header format requirements as a field bus protocol type;
the field semantic analysis unit is used for dividing the fields of the data streams by using a protocol format corresponding to the protocol type, and carrying out semantic analysis on the fields of each data stream according to the protocol format to obtain semantic analysis results of the fields;
the key field determining unit is used for obtaining an industrial human-computer interface, identifying the industrial human-computer interface, obtaining industrial control data of each display area in the industrial human-computer interface, and determining the positions and meanings of an area identification field and a variable data field in each data stream based on the industrial control data and the industrial control data field, wherein the industrial control data field is a field with the type of industrial control data in the semantic analysis result.
7. The semantic parsing system according to claim 6, wherein the protocol type determination unit is configured to:
For each of the bus protocol streams:
judging whether the data stream contains protocol header data, if so, determining the industrial Ethernet protocol type matched with the protocol header data of the data stream as the protocol type of the data stream in the preset protocol header format requirement;
in case the data stream does not contain said protocol header data, the protocol type of the data stream is determined as a field bus protocol type.
8. The semantic parsing system according to claim 6, wherein the key field determination unit is configured to:
acquiring industrial control data of each display area in the industrial human-computer interface by using a preset image recognition algorithm;
industrial control data for each display area:
acquiring a target data stream according to the industrial control data of the display area, wherein the target data stream is a data stream with a field matched with the data code of the industrial control data of the display area;
using a preset sequence comparison algorithm to perform sequence comparison on a constant data sequence in the industrial control data of the display area and an industrial control data field of the target data stream, determining a comparison consistent field in the industrial control data field as the area identification field, and determining the meaning of the constant data sequence identified by the preset image identification algorithm as the meaning of the area identification field;
And carrying out sequence comparison on a non-constant data sequence in the industrial control data of the display area and an industrial control data field of the target data stream by using the preset sequence comparison algorithm, determining a consistent comparison field in the industrial control data field as the variable data field, and determining the meaning of the non-constant data sequence identified by the preset image identification algorithm as the meaning of the variable data field.
9. A semantic parsing apparatus of an industrial control protocol, the semantic parsing apparatus comprising:
a processor;
a memory for storing the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the semantic parsing method of the industrial control protocol according to any one of claims 1 to 5.
10. A computer readable storage medium, characterized in that instructions in the computer readable storage medium, when executed by a processor of a semantic parsing device of an industrial control protocol, enable the semantic parsing device to perform the semantic parsing method of an industrial control protocol according to any of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210723745.5A CN115134433B (en) | 2022-06-24 | 2022-06-24 | Semantic analysis method, system and equipment of industrial control protocol and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210723745.5A CN115134433B (en) | 2022-06-24 | 2022-06-24 | Semantic analysis method, system and equipment of industrial control protocol and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN115134433A CN115134433A (en) | 2022-09-30 |
| CN115134433B true CN115134433B (en) | 2024-03-29 |
Family
ID=83379282
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210723745.5A Active CN115134433B (en) | 2022-06-24 | 2022-06-24 | Semantic analysis method, system and equipment of industrial control protocol and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115134433B (en) |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101035111A (en) * | 2007-04-13 | 2007-09-12 | 北京启明星辰信息技术有限公司 | Intelligent protocol parsing method and device |
| CN103188267A (en) * | 2013-03-27 | 2013-07-03 | 中国科学院声学研究所 | Protocol analyzing method based on DFA (Deterministic Finite Automaton) |
| CN103595729A (en) * | 2013-11-25 | 2014-02-19 | 北京锐安科技有限公司 | Protocol analysis method and device |
| CN109547409A (en) * | 2018-10-19 | 2019-03-29 | 中国电力科学研究院有限公司 | A kind of method and system for being parsed to industrial network transport protocol |
| WO2020143226A1 (en) * | 2019-01-07 | 2020-07-16 | 浙江大学 | Industrial control system intrusion detection method based on integrated learning |
| CN111585832A (en) * | 2020-04-01 | 2020-08-25 | 浙江树人学院（浙江树人大学） | Industrial control protocol reverse analysis method based on semantic pre-mining |
| CN111723579A (en) * | 2020-06-17 | 2020-09-29 | 国家计算机网络与信息安全管理中心 | Industrial control protocol field and semantic reverse inference method |
| CN114553983A (en) * | 2022-03-03 | 2022-05-27 | 沈阳化工大学 | Deep learning-based high-efficiency industrial control protocol analysis method |
-
2022
- 2022-06-24 CN CN202210723745.5A patent/CN115134433B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101035111A (en) * | 2007-04-13 | 2007-09-12 | 北京启明星辰信息技术有限公司 | Intelligent protocol parsing method and device |
| CN103188267A (en) * | 2013-03-27 | 2013-07-03 | 中国科学院声学研究所 | Protocol analyzing method based on DFA (Deterministic Finite Automaton) |
| CN103595729A (en) * | 2013-11-25 | 2014-02-19 | 北京锐安科技有限公司 | Protocol analysis method and device |
| CN109547409A (en) * | 2018-10-19 | 2019-03-29 | 中国电力科学研究院有限公司 | A kind of method and system for being parsed to industrial network transport protocol |
| WO2020143226A1 (en) * | 2019-01-07 | 2020-07-16 | 浙江大学 | Industrial control system intrusion detection method based on integrated learning |
| CN111585832A (en) * | 2020-04-01 | 2020-08-25 | 浙江树人学院（浙江树人大学） | Industrial control protocol reverse analysis method based on semantic pre-mining |
| CN111723579A (en) * | 2020-06-17 | 2020-09-29 | 国家计算机网络与信息安全管理中心 | Industrial control protocol field and semantic reverse inference method |
| CN114553983A (en) * | 2022-03-03 | 2022-05-27 | 沈阳化工大学 | Deep learning-based high-efficiency industrial control protocol analysis method |
Non-Patent Citations (1)
| Title |
|---|
| 非标工业控制协议格式逆向方法研究;程必成;刘仁辉;赵云飞;许凤凯;;电子技术应用;20180406(04);全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN115134433A (en) | 2022-09-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110380989B (en) | Internet of things equipment identification method based on two-stage and multi-classification network traffic fingerprint features | |
| CN109558479B (en) | Rule matching method, device, equipment and storage medium | |
| JP5671320B2 (en) | Information processing apparatus, control method therefor, and program | |
| CN106970820A (en) | Code storage method and code storage | |
| CN115687687B (en) | Video segment searching method and system for open domain query | |
| CN111090417A (en) | Binary file analysis method, device, equipment and medium | |
| CN112085087A (en) | Method and device for generating business rules, computer equipment and storage medium | |
| CN113452672A (en) | Method for analyzing abnormal flow of terminal of Internet of things of electric power based on reverse protocol analysis | |
| CN106878242B (en) | Method and device for determining user identity category | |
| CN112861894A (en) | Data stream classification method, device and system | |
| Shim et al. | Clustering method in protocol reverse engineering for industrial protocols | |
| JP7509886B2 (en) | Method and apparatus for pushing subscription data in the internet of things, and devices and storage media thereof | |
| CN113157941B (en) | Service characteristic data processing method, service characteristic data processing device, text generating method, text generating device and electronic equipment | |
| CN115134433B (en) | Semantic analysis method, system and equipment of industrial control protocol and storage medium | |
| CN112839055B (en) | Network application identification method and device for TLS encrypted traffic and electronic equipment | |
| CN116033048B (en) | Multi-protocol analysis method of Internet of things, electronic equipment and storage medium | |
| CN112417886A (en) | Intention entity information extraction method and device, computer equipment and storage medium | |
| CN112527862A (en) | Time sequence data processing method and device | |
| CN115334179B (en) | Unknown protocol reverse analysis method based on named entity recognition | |
| US20230186122A1 (en) | Inference-oriented method and system for application flow and index vectorization | |
| CN114615052A (en) | Intrusion detection method and system based on knowledge compilation | |
| CN110650130B (en) | Industrial control intrusion detection method based on multi-classification GoogLeNet-LSTM model | |
| CN111199259B (en) | Identification conversion method, device and computer readable storage medium | |
| CN116939669B (en) | Network element identification method, system, equipment and readable medium based on IP learning table | |
| CN109981818A (en) | Domain name semantically anomalous analysis method, device, computer equipment and its storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |