The invention relates to the technical field of industrial network and information security, in particular to an industrial control system and a monitoring method for network security, which is used for effectively monitoring the network security of an industrial control system. In the method, at least one first data source related to the industrial control system is selected and the first data is obtained from it; the characteristics of the first data changing with time are counted as the behavior model of the industrial control system; the second data is obtained from part or all of the first data source; whether the second data has the characteristics described by the behavior model is judged, if it has the characteristics, Then the industrial control system is determined to have normal behavior, if not, the industrial control system is determined to have abnormal behavior. Considering the certainty of industrial control system behavior, the system behavior model is obtained by statistics. Based on the relatively definite behavior model, the abnormal behavior of the system is judged, and the result is more accurate.
【技术实现步骤摘要】
【国外来华专利技术】PCT国内申请，说明书已公开。
【技术保护点】
PCT国内申请，权利要求书已公开。/n
【技术特征摘要】
【国外来华专利技术】PCT国内申请，...
还没有人留言评论。发表了对其他浏览者有用的留言会获得科技券。