Search International and National Patent Collections

1. (WO2018134939) ATTACK DETECTION DEVICE, ATTACK DETECTION METHOD, AND ATTACK DETECTION PROGRAM

Pub. No.:    WO/2018/134939    International Application No.:    PCT/JP2017/001690
Publication Date: Fri Jul 27 01:59:59 CEST 2018 International Filing Date: Fri Jan 20 00:59:59 CET 2017
IPC: G06F 21/55
Applicants: MITSUBISHI ELECTRIC CORPORATION
三菱電機株式会社
Inventors: NAKAI, Tsunato
中井 綱人
YAMAGUCHI, Teruyoshi
山口 晃由
SHIMIZU, Koichi
清水 孝一
KOBAYASHI, Nobuhiro
小林 信博
Title: ATTACK DETECTION DEVICE, ATTACK DETECTION METHOD, AND ATTACK DETECTION PROGRAM
Abstract:
Provided is an attack detection device (200), wherein a whitelist storage unit (242) associates each system state with a whitelist (209), which defines system information permitted in the system state, and stores the whitelist (209). A state estimating unit (210) estimates the current system state of a control system (700) on the basis of communication data (601) that is communicated between a server device (300) and a device (400). An attack determination unit (220) acquires, from the whitelist storage unit (242), the whitelist (209) corresponding to the current system state, and determines, on the basis of the acquired whitelist (209) and the system information in the current system state, whether an attack is detected or not.