Title:
INCIDENT DETECTION SYSTEM
Document Type and Number:
WIPO Patent Application WO/2016/143231
Kind Code:
A1
Abstract:
Provided is a system which detects an improper communication, without imposing a processing burden on a control device. An incident detection system detects security incidents and is provided with: an ID generation unit which generates identification information of an own gateway device; a detection packet generation unit which generates a detection packet that includes control information transmitted from a control device and path information in which the own gateway device identification information has been appended to a communication packet; a log generation unit which generates log information that includes the detection packet; and a device communication unit which transmits the log information to a management server connected by a network to the gateway device, or which transmits the detection packet to the control device by which the device communication unit is controlled on the basis of the control information. The management server is provided with: a server communication unit which receives the log information from the gateway device; a communication path extraction unit which stores in advance, in a storage unit, assumed path information containing path information extracted from the log information; and an incident detection unit which detects an improper communication packet on the basis of the assumed path information stored in the storage unit and the path information included in the log information.
Inventors:
UCHIYAMA HIROKI (JP)
OWADA TORU (JP)
KAYASHIMA MAKOTO (JP)
FUJIHARA YUSUKE (JP)
OHKUBO SATOSHI (JP)
HAMANAKA JUN (JP)
OWADA TORU (JP)
KAYASHIMA MAKOTO (JP)
FUJIHARA YUSUKE (JP)
OHKUBO SATOSHI (JP)
HAMANAKA JUN (JP)
Application Number:
PCT/JP2015/086065
Publication Date:
September 15, 2016
Filing Date:
December 24, 2015
Export Citation:
Assignee:
HITACHI LTD (JP)
International Classes:
H04L12/66; H04L12/70
Foreign References:
| JP2012034273A | 2012-02-16 | |||
| JP2003229913A | 2003-08-15 | |||
| JPH04235652A | 1992-08-24 | |||
| JP2008099156A | 2008-04-24 | |||
| JP2006100874A | 2006-04-13 | |||
| JP2007131029A | 2007-05-31 | |||
| JP2012034129A | 2012-02-16 |
Attorney, Agent or Firm:
SEIRYO I. P. C. (JP)
青稜 patent business corporation (JP)
青稜 patent business corporation (JP)
Download PDF: