Abstract: The present disclosure discloses a method of generating a master state that is a normal state in a repeated cycle by analyzing log data output from a programmable logic controller (PLC). In addition, a method of generating log data as graph data as data preprocessing for generating a master state is disclosed. The method of generating a master pattern and the method of training a cycle analysis model according to the present disclosure are different from the related art in that the methods are a technology of processing a machine control language (low-level language) that is difficult for humans to analyze and converting the machine control language into an analyzable language (high-level language), i.e., a machine language processing (MLP)-based technology that analyzes the executed machine language (a language that controls a machine) with a computer and can be understood by humans.

Abstract: Disclosed is a method of analyzing a programmable logic controller (PLC) logic to detect whether an anomaly that deviates from a standard pattern occurs in a repeated cycle. After modeling and patterning an operation pattern of automation equipment and processes with a graph, an anomaly detecting model capable of detecting whether a pattern is abnormal may be constructed as a graph AutoEncoder model. By detecting the change in the process pattern, it is possible to early detect the anomaly of the equipment and processes.

Abstract: An apparatus for extracting common command information from programmable logic controller (PLC) ladder information according to the present invention may include: a logic information extracting portion configured to extract control logic information from XML information converted from PLC ladder information; and a common command converting portion configured to convert the control logic information extracted by the logic information extracting portion into common command information, wherein the logic information extracting portion is configured to extract, from the XML information, the control logic information in the form of a block obtained by grouping units that respectively represent contacts and lines constituting the PLC ladder information according to an AND condition and an OR condition.