抄録
In recent years, the increasing prominence of cyber-attacks has highlighted the critical need for enhanced security in industrial control systems and mobility network systems. These systems, responsible for controlling production lines and plants, are becoming primary targets for cyber threats. In this paper, we propose a method to maintain the stable operation of control systems when cyber-attack anomalies are detected, while simultaneously preventing the spread of damage based on the detected anomalous activities. By integrating real-time anomaly detection with dynamic network zoning, our method aims to promptly detect and isolate any malicious activities or unauthorized devices in the network. In this paper, we demonstrate the effectiveness of our anomaly detection method using security units through experiments in an evaluation environment simulating an industrial control system field network. Furthermore, we show that the implementation of dynamic zoning can effectively mitigate the impact of potential attacks. Our research contributes a robust security solution designed with the unique characteristics and requirements of control systems in mind, offering a promising direction for future advancements in the field.