Abstract: An abnormal packet detection apparatus and method are provided. The abnormal packet detection apparatus stores a whitelist corresponding to a protocol port, wherein the whitelist includes at least one legal packet record. Each legal packet record includes a legal packet length, a legal source address, and a legal variation position set, and corresponds to a reference packet. The abnormal packet detection apparatus determines that a current packet length and a current source address of a to-be-analyzed packet are respectively the same as the legal packet length and the legal source address of a reference packet record among the at least one legal packet record, determines a current variation position of the to-be-analyzed packet by comparing the to-be-analyzed packet with the reference packet corresponding to the reference packet record, and generates a detection result by comparing the current variation position with the legal variation position set of the reference packet record.

Abstract: An abnormal packet detection apparatus and method are provided. The abnormal packet detection apparatus stores a whitelist corresponding to a protocol port, wherein the whitelist includes at least one legal packet record. Each legal packet record includes a legal packet length, a legal source address, and a legal variation position set, and corresponds to a reference packet. The abnormal packet detection apparatus determines that a current packet length and a current source address of a to-be-analyzed packet are respectively the same as the legal packet length and the legal source address of a reference packet record among the at least one legal packet record, determines a current variation position of the to-be-analyzed packet by comparing the to-be-analyzed packet with the reference packet corresponding to the reference packet record, and generates a detection result by comparing the current variation position with the legal variation position set of the reference packet record.

Abstract: An intrusion detection device includes a connection interface and a processor. The processor is configured to obtain a network protocol data and an industrial operation data of each of the plurality of first packets; tag a first internet protocol (IP) address of the network protocol data with a first action role and tag a second internet protocol (IP) address of the network protocol data with a second action role respectively; obtain a related group of the first IP address, wherein the related group comprises a first industrial device information and a second industrial device information; and generate a rule list, wherein the rule list comprises the first action role, the first IP address, the second IP address, and contents of the related group, which the first action role on the rule list corresponds to the first industrial device information and the second industrial device information.

Abstract: A frequency calibration apparatus and method are provided. An oscillator of the frequency calibration apparatus has an operation frequency. The frequency calibration apparatus receives a plurality of time packets from an NTP server at a plurality of first time points. Each of the time packets records a second time point that the NTP server transmits the time packet. The frequency calibration apparatus calculates an offset for each of the time packets in a subset of all the time packets, calculates a clock skew according to the first time points and the offsets of the time packets in the subset, calculates a difference between the clock skew and a standard frequency value, determines that an absolute value of the difference is greater than a threshold, and adjusts the operation frequency to an initial frequency after determining that the absolute value of the difference is greater than the threshold.

Abstract: A frequency calibration apparatus and method are provided. An oscillator of the frequency calibration apparatus has an operation frequency. The frequency calibration apparatus receives a plurality of time packets from an NTP server at a plurality of first time points. Each of the time packets records a second time point that the NTP server transmits the time packet. The frequency calibration apparatus calculates an offset for each of the time packets in a subset of all the time packets, calculates a clock skew according to the first time points and the offsets of the time packets in the subset, calculates a difference between the clock skew and a standard frequency value, determines that an absolute value of the difference is greater than a threshold, and adjusts the operation frequency to an initial frequency after determining that the absolute value of the difference is greater than the threshold.

Abstract: A disaster monitoring and pre-warning system comprises a disaster informing system, peer-to-peer wireless communication devices, a monitoring host and a pre-warning message issuing host. The disaster informing system transfers at least one first disaster information. The peer-to-peer wireless communication devices sense at least one disaster event to generate at least one second disaster information. The at least one second disaster information is transferred by a peer-to-peer technology. The monitoring host receives the at least one first disaster information and the at least one second disaster information to generate a first pre-warning information. The pre-warning message issuing host issues the first pre-warning information.

Abstract: A disaster monitoring and pre-warning system comprises a disaster informing system, peer-to-peer wireless communication devices, a monitoring host and a pre-warning message issuing host. The disaster informing system transfers at least one first disaster information. The peer-to-peer wireless communication devices sense at least one disaster event to generate at least one second disaster information. The at least one second disaster information is transferred by a peer-to-peer technology. The monitoring host receives the at least one first disaster information and the at least one second disaster information to generate a first pre-warning information. The pre-warning message issuing host issues the first pre-warning information.