A method for mining intrusion data association in industrial control networks based on priority diagnosis tree
Research on the mining method of industrial control network intrusion data association based on priority diagnosis tree to improve the ability of industrial control network intrusion data mining.The combination of grid search and simulated annealing algorithm is used to obtain the optimal parameters of the SVM extractor.The SVM extractor is used to extract the features of industrial control network intrusion data,and rough set is used to reduce the feature attributes of industrial control network intrusion data,reducing the redundant feature attributes of data samples in industrial control network intrusion mining.Using the reduced features as input to the priority diagnosis tree,according to the mining criteria for industrial control network intrusion data association,the priority diagnosis tree is used to achieve industrial control network intrusion data association mining.The experimental results show that the average false alarm rate of this method is 1.38%,and the detection rate is greater than 90%.The association mining time is less than 3.6 seconds,and within the range of-6-26dB normalized spatial spectrum,it can effectively achieve industrial control network intrusion signal data mining,and the detection effect is the best.
priority diagnosis treeindustrial control networkintrusion dataassociation mining methodsdata feature extractionrough set