Patent ID: 9197652
Filing Date: 2015-11-24
Classification: G06N,H04L

Abstract:
1. A method for detecting anomalies in a control network, comprising: detecting, by a microprocessor, communication data in the control network; detecting, by the microprocessor, time intervals between correct messages in the communication data, and storing into training data the time intervals between correct messages in the communication data; training, by the microprocessor, an anomaly detection system using the training data; detecting, by the microprocessor, current communication data in the control network and time intervals between current images being viewed in the communication system; checking, by the anomaly detection system, the time intervals between correct messages in the current communication data and the time intervals between current images being viewed to detect a deviation from the training data; and identifying, by the anomaly detection system, an anomaly in response to the detected deviation from the training data.