User operation anomaly detection method of software in industrial control system
Wen Yuan-me · China Measurement & Test · 2014
A behavior trust evaluation method was proposed to solve the problem of user behavior security of terminal control system software for industrial control network.Firstly,history sequences in the form of numerical array were extracted from the log file of software.Then,the Apriori mining algorithm was exploited to obtain the frequent sequential patterns from user action sequence,and a matrix of probabilities was established upon mined patterns.Finally,the credibility of user behavior was detected by extracting the current user behavior sequence to match with the sequence in historical sequence pattern set based on BLAST-SSAHA algorithm.These results can provide the basis for evaluating the credibility of the system.The experimental and analytical results show that the effectiveness and feasibility of the methods are validated.