2020.01.07
Overview
An intrusion detection device and an intrusion detection method are provided. The intrusion detection device is suitable for Modbus protocol. The intrusion detection device includes a connection interface and a processor. The processor receives, through the connection interface, a plurality of first packets. The processor is configured to obtain a network protocol data and an industry operation data of each first packet; tag a first operation character of a first internet protocol (IP) address of the network protocol data and a second operation character of a second IP address of the network protocol data; obtain an association group of the first IP address; and create a rule list which includes the first operation character, the first IP address, the second IP address, and contents of the association group.Category
發明
Patented
109100494
發明第I712912號
Filing Date
2020.01.07Expired Date
2040.01.06Notification
2021.10.20