NETWORK SECURITY METHOD USING DATA ANALYSIS OF INDUSTRIAL NETWORK PROTOCOL AND MACHINE LEARNING THEREOF AND NETWORK SECURITY APPARATUS USING THE SAME

摘要

The present invention relates to a method for promoting network security through packet analysis for a payload of an industrial protocol packet and learning based on the packet analysis, and a device using the same. An abnormal command, an address region and data are detected and blocked through deeper analysis in order to protect an automation system for industrial equipment on a network. More specifically, a network security device according to the present invention comprises a packet analysis part extracting packet analysis information by analyzing the payload of the obtained packet, when the packet is obtained.