Abstract: An abnormal packet detection apparatus and method are provided. The abnormal packet detection apparatus stores a whitelist corresponding to a protocol port, wherein the whitelist includes at least one legal packet record. Each legal packet record includes a legal packet length, a legal source address, and a legal variation position set, and corresponds to a reference packet. The abnormal packet detection apparatus determines that a current packet length and a current source address of a to-be-analyzed packet are respectively the same as the legal packet length and the legal source address of a reference packet record among the at least one legal packet record, determines a current variation position of the to-be-analyzed packet by comparing the to-be-analyzed packet with the reference packet corresponding to the reference packet record, and generates a detection result by comparing the current variation position with the legal variation position set of the reference packet record.

Abstract: An abnormal packet detection apparatus and method are provided. The abnormal packet detection apparatus stores a whitelist corresponding to a protocol port, wherein the whitelist includes at least one legal packet record. Each legal packet record includes a legal packet length, a legal source address, and a legal variation position set, and corresponds to a reference packet. The abnormal packet detection apparatus determines that a current packet length and a current source address of a to-be-analyzed packet are respectively the same as the legal packet length and the legal source address of a reference packet record among the at least one legal packet record, determines a current variation position of the to-be-analyzed packet by comparing the to-be-analyzed packet with the reference packet corresponding to the reference packet record, and generates a detection result by comparing the current variation position with the legal variation position set of the reference packet record.

Abstract: An intrusion detection device includes a connection interface and a processor. The processor is configured to obtain a network protocol data and an industrial operation data of each of the plurality of first packets; tag a first internet protocol (IP) address of the network protocol data with a first action role and tag a second internet protocol (IP) address of the network protocol data with a second action role respectively; obtain a related group of the first IP address, wherein the related group comprises a first industrial device information and a second industrial device information; and generate a rule list, wherein the rule list comprises the first action role, the first IP address, the second IP address, and contents of the related group, which the first action role on the rule list corresponds to the first industrial device information and the second industrial device information.

Abstract: A demand response determination apparatus and a demand response determination method thereof are provided. The demand response determination apparatus connects to an electric power system via a network. The demand response determination apparatus receives power consumption information from the electric power system and decides a power consumption mode of the electric power system according to the power consumption information. The demand response determination apparatus calculates demanded power according to the power consumption mode and determines whether the demanded power exceeds a power consumption threshold. The demand response determination apparatus informs the electric power system to unload electric power equipment when the demanded power exceeds the power consumption threshold.

Abstract: A demand response determination apparatus and a demand response determination method thereof are provided. The demand response determination apparatus connects to an electric power system via a network. The demand response determination apparatus receives power consumption information from the electric power system and decides a power consumption mode of the electric power system according to the power consumption information. The demand response determination apparatus calculates demanded power according to the power consumption mode and determines whether the demanded power exceeds a power consumption threshold. The demand response determination apparatus informs the electric power system to unload electric power equipment when the demanded power exceeds the power consumption threshold.