Search International and National Patent Collections
|1. (WO2018134939) ATTACK DETECTION DEVICE, ATTACK DETECTION METHOD, AND ATTACK DETECTION PROGRAM|
|Applicants:||MITSUBISHI ELECTRIC CORPORATION
|Title:||ATTACK DETECTION DEVICE, ATTACK DETECTION METHOD, AND ATTACK DETECTION PROGRAM|
Provided is an attack detection device (200), wherein a whitelist storage unit (242) associates each system state with a whitelist (209), which defines system information permitted in the system state, and stores the whitelist (209). A state estimating unit (210) estimates the current system state of a control system (700) on the basis of communication data (601) that is communicated between a server device (300) and a device (400). An attack determination unit (220) acquires, from the whitelist storage unit (242), the whitelist (209) corresponding to the current system state, and determines, on the basis of the acquired whitelist (209) and the system information in the current system state, whether an attack is detected or not.