Monitoring device monitoring network

摘要

A monitoring device configured to monitor a network to which plural controllers are connected which includes a decoder configured to extract target data belonging to a target data group from data received from the plural controllers, a first comparator configured to determine whether an immutable part of the target data is known or anomalous, a second comparator configured to determine whether a reception interval of the target data group is normal or anomalous, a third comparator configured to determine whether the number of the target data having been received and included in the target data group is normal or anomalous, and determine whether each reception interval between the target data is normal or anomalous, and a warning counter configured to individually count the number of anomalies determined by the first comparator, the number of anomalies determined by the second comparator, and the number of anomalies determined by the third comparator.

主权项

1. A monitoring device configured to monitor a network connected to a plurality of controllers, the monitoring device comprising:
a decoder configured to extract target data belonging to a target data group from data received from the plurality of controllers; a first comparator configured to determine whether an immutable part of the target data is known or anomalous; a second comparator configured to determine whether a reception interval of the target data group is normal or anomalous; a third comparator configured to determine whether a number of the target data received and included in the target data group is normal or anomalous, and determine whether each reception interval between the target data is normal or anomalous; a warning counter configured to individually count a number of anomalies determined by the first comparator, a number of anomalies determined by the second comparator, and a number of anomalies determined by the third comparator; a first register configured to set identification information of the target data; a second register configured to set information of the immutable part of the target data; a third resister configured to set a normal value of the reception interval of the target data group; a fourth register configured to set a normal value of each reception interval between the target data of the target data group; a fifth register configured to set a normal value of the number of the target data of the target data group; a first counter configured to count the reception interval of the target data group; and a second counter configured to count each reception interval between the target data of the target data group, wherein:
the decoder is configured to extract the target data belonging to the target data group by comparing the data received from the plurality of controllers and a value of the identification information set in the first register;the first comparator is configured to determine whether the immutable part of the target data is known or anomalous by comparing the immutable part of the target data and a value of the information set in the second register;the second comparator is configured to determine whether the reception interval of the target data group is normal or anomalous by comparing a value counted by the first counter and the normal value set in the third register; andthe third comparator is configured to determine whether each reception interval between the target data is normal or anomalous by comparing a value counted by the second counter and the normal value set in the fourth register, and determine whether the number of the target data of the target data group is normal or anomalous on the basis of the normal value set in the fifth register.