Title:
ABNORMAL COMMUNICATION DETECTION DEVICE, ABNORMAL COMMUNICATION DETECTION METHOD, AND PROGRAM
Document Type and Number:
WIPO Patent Application WO/2019/102911
Kind Code:
A1
Abstract:
The present invention provides an abnormal communication detection device capable of reducing overdetection. This abnormal communication detection device comprises: a reception unit which receives learning communication data containing an identifier, and detection communication data containing an identifier; a knowledge information acquisition unit which acquires knowledge information that is information relating to a temporal property and/or a property of a payload of the learning communication data; a sorting rule generation unit which generates a sorting rule that is a rule defining, on the basis of the knowledge information, which identifier-containing communication data is to be sorted into which detector among a plurality of detectors; a sorting unit which sorts the communication data into any one of the detectors on the basis of the sorting rule; and the plurality of detectors which each, if the learning communication data has been sorted thereinto, learn a model for detecting whether the communication data sorted into the detector is normal or abnormal, and if the detection communication data has been sorted thereinto, detect whether the detection communication data is normal or abnormal on the basis of the learned model.
Inventors:
KOYAMA TAKUMA (JP)
OKANO YASUSHI (JP)
TANAKA MASASHI (JP)
OKANO YASUSHI (JP)
TANAKA MASASHI (JP)
Application Number:
PCT/JP2018/042080
Publication Date:
May 31, 2019
Filing Date:
November 14, 2018
Export Citation:
Assignee:
NIPPON TELEGRAPH & TELEPHONE (JP)
International Classes:
H04L12/28; B60R16/023; H04L12/70
Foreign References:
| US20160350657A1 | 2016-12-01 |
Other References:
YOSHIHIRO UJIIETAKESHI KISHIKAWATOMOYUKI HAGAHIDEKI MATSUSHIMAMASATO TANABEYOSHIHIKO KITAMURAJUN ANZAI: "Proposal of CAN Filtering Technology for In-Vehicle Network", SYMPOSIUM ON CRYPTOGRAPHY AND INFORMATION SECURITY SCIS 2015, 20 January 2015 (2015-01-20)
MASATO TANABEJUN ANZAIMANABU MAEDAYOSHIHIRO UJIIEHIDEKI MATSUHIMATORN WAKABAYASHI: "Proposal of Multi-Layer Cooperative CAN Filtering Technology for In-Vehicle Gateway ECU", SYMPOSIUM ON CRYPTOGRAPHY AND INFORMATION SECURITY SCIS 2016, 19 January 2016 (2016-01-19)
See also references of EP 3720054A4
MASATO TANABEJUN ANZAIMANABU MAEDAYOSHIHIRO UJIIEHIDEKI MATSUHIMATORN WAKABAYASHI: "Proposal of Multi-Layer Cooperative CAN Filtering Technology for In-Vehicle Gateway ECU", SYMPOSIUM ON CRYPTOGRAPHY AND INFORMATION SECURITY SCIS 2016, 19 January 2016 (2016-01-19)
See also references of EP 3720054A4
Attorney, Agent or Firm:
NAKAO, Naoki et al. (JP)
Download PDF: