簡易檢索 / 詳目顯示

研究生: 黃千瑋
CHIEN-WEI HUANG
論文名稱: 具網路流量檢測與防火牆之工業物聯網系統開發
An Industrial Internet of Things (IIoT) system with network traffic detection and firewall
指導教授: 李維楨
WEI-CHEN LEE
口試委員: 李維楨
WEI-CHEN LEE
梁書豪
SHU-HAO LIANG
吳國彰
KUO-CHANG WU
學位類別: 碩士
Master
系所名稱: 工程學院 - 機械工程系
Department of Mechanical Engineering
論文出版年: 2023
畢業學年度: 111
語文別: 中文
論文頁數: 74
中文關鍵詞: 工業4.0物聯網資訊安全防火牆網路流量檢測
外文關鍵詞: Industry 4.0, IoT (Internet of Things), Cybersecurity, Firewall, Network traffic detection
相關次數: 點閱:214下載:0
分享至:
查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報
  • 隨著網路的發展,物聯網逐漸興起應用的層面也越來越廣泛,傳統的工業以大量製造降低成本的商業模式為主。然而為了因應現代市場的快速變化、少子化以及人力成本的提高,企業透過轉型來降低製造成本。在工業4.0的推動下,製造業面臨數位轉型的挑戰,要轉型成智慧工廠的第一步需要與工廠內的機臺建立通訊,在生產過程中能夠監控機臺並且收集加工數據有助於提升整體的生產效率與產品品質。本研究以台灣工業界常用之CNC控制器品牌發那科(FANUC)與PLC控制器品牌三菱(MITSUBISHI)分別開發對應之物聯網系統。使用FOCAS Library與FANUC控制器進行通訊、採集數據與監控工具機。數據傳輸的過程呼叫使用SharpPcap功能擷取流量封包,並使用防火牆建立規則過濾封包的流動,與三菱PLC通訊的方法使用MX Component進行連線,來獲取數據與監控狀態。
    本研究建立了一套具有資安功能之物聯網系統來與工具機通訊,採集加工數據並將數據儲存至雲端,達到資料數位化。在數據傳輸的過程中考慮了網路安全方面之問題,將流經電腦與工具機端口之網路封包擷取至系統中供使用者參考,並透過防火牆將不明來源之IP位址進行封鎖。過往以插入USB隨身碟將NC程式上傳至工具機的方法,改為將隨身碟插入到電腦中後,再利用本系統進行上傳,降低工具機因隨身碟可能夾帶不明程式造成機器受到攻擊的可能性。


    With the development of the Internet, the application of the Internet of Things (IoT) has become increasingly widespread. Traditional industries have primarily focused on mass production to reduce costs. However, in response to the rapid changes in the modern market, declining birth rates, and increasing labor costs, businesses are undergoing transformations to lower manufacturing costs. Under the impetus of Industry 4.0, the manufacturing industry is facing the challenge of digital transformation. The first step towards becoming a smart factory is to establish communication with the machines within the factory. Monitoring the machines and collecting processing data during the production process helps improve overall production efficiency and product quality. In this study, IoT systems corresponding to commonly used CNC controllers in the Taiwanese industrial sector, such as FANUC and Mitsubishi PLC controllers, were developed. The FOCAS Library and FANUC controllers were used for communication, data collection, and monitoring of machine tools. During the data transmission process, the SharpPcap function was utilized to capture packet flows, and firewall rules were established to control inbound and outbound packet traffic. The MX Component was employed for communication with the Mitsubishi PLC to obtain data and monitor its status.
    This study established a set of Internet of Things system with information security function to communicate with machine tools, data collection, and cloud storage, achieving data digitization. Network security issues were considered during the data transmission process. Network packets passing through the computer and machine tool ports were captured and made available for user reference. Unknown IP addresses were blocked through the firewall. The conventional method of uploading NC programs to machine tools by inserting USB flash drives was replaced with the process of inserting the flash drive into the computer and utilizing this system for uploading, reducing the possibility of machine tool attacks due to potentially malicious programs carried by USB flash drives.

    摘要 I Abstract II 誌謝 IV 目錄 V 圖目錄 VIII 表目錄 XI 第1章 緒論 1 1.1研究背景與動機初稿 1 1.2工業4.0相關技術介紹 2 1.2.1工業物聯網 3 1.2.2智慧製造 4 1.2.3物聯網的安全與挑戰 5 1.3文獻回顧 5 1.4研究目的 8 1.5論文架構 9 第2章 實驗設備與使用軟體 10 2.1 CNC 車床 10 2.2 PLC 控制器 11 2.3 PC 筆記型電腦 12 2.4 Microsoft Visual Studio 2022 13 第3章 系統架構 14 3.1基於FOCAS之機聯網系統架構 14 3.1.1系統架構 14 3.2基於MX Component之機聯網系統架構 15 3.2.1系統架構 16 3.3機聯網系統架構 16 第4章 研究方法 18 4.1 基於FOCAS之機聯網系統開發 18 4.1.1連線方法 18 4.2 基於MX Component之機聯網系統開發 21 4.2.1連線方法 21 4.3資料庫系統 23 4.3.1資料庫 23 4.3.2資料庫管理系統 24 4.4網路流量檢測與防火牆 25 4.4.1網路流量檢測 25 4.4.2防火牆 26 4.4.3防火牆延遲測試 26 4.5介面設計與呈現 29 4.5.1第一版介面設計 29 4.5.2第二版介面設計 30 4.5.3介面顏色設計 30 第5章 實驗結果 32 5.1 基於FOCAS之機聯網系統 32 5.1.1系統流程 32 5.1.2登入介面 33 5.1.3 FOCAS系統介面 33 5.1.3.1首頁 33 5.1.3.2儀表板 34 5.1.3.3上傳/下載 35 5.1.3.4刀具資訊 35 5.1.3.5資料庫 36 5.1.3.6防火牆 37 5.2 基於MX Component之機聯網系統 40 5.2.1系統流程 40 5.2.2 MX Component系統介面 40 第6章 結論與未來展望 42 6.1結論 42 6.2未來展望 42 參考文獻 43 附錄1 FOCAS Library使用函式 45 1-1主軸/受控軸功能 45 1-2狀態監控 48 1-3刀具資訊 50 1-4 NC程式 51 1-5 CNC參數 54 附錄2 MX Component使用函式 55 2-1狀態監控 55 2-2讀取/修改數據 56

    [1]Trend Micro, "Security Intelligence Threat Report," Trend Micro Security Intelligence[Online]. Posted: Mar. 15, 2023. Available: https://www.trendmicro.com/zh_tw/security-intelligence/threat-report.html.
    [2]Clearswift, "Insider Threat: 74% Security Incidents Come from Extended Enterprise, Not Hacking Groups,"Clearswift Press Releases, [Online]. Posted: Sep. 22, 2017.Available: https://www.clearswift.com/resources/press-releases/insider-threat-74-security-incidents-come-extended-enterprise-not-hacking-groups
    [3]A. Martins, J. Lucas, H. Costelha, and C. Neves, "Developing an OPC UA Server for CNC Machines," Procedia Computer Science, vol. 180, pp. 561-570, 2021/01/01/ 2021, doi: 10.1016/j.procs.2021.01.276.
    [4]F. Kohnhäuser, D. Meier, F. Patzer, and S. Finster, "On the Security of IIoT Deployments: An Investigation of Secure Provisioning Solutions for OPC UA," IEEE Access, vol. 9, pp. 99299-99311, 2021, doi: 10.1109/ACCESS.2021.3096062.
    [5]M. Boyang, L. Maoyue, L. Xianli, W. Lihui, and S. Y. Liang, "Open architecture CNC system based on soft-integrated communication," Procedia CIRP, vol. 72, pp. 671-676, 2018/01/01/ 2018, doi: https://doi.org/10.1016/j.procir.2018.03.079.
    [6]C. F. Erazo Navas, A. E. Yepes, S. Abolghasem, and G. Barbieri, "MTConnect-based decision support system for local machine tool monitoring," Procedia Computer Science, vol. 180, pp. 69-78, 2021/01/01/ 2021, doi: https://doi.org/10.1016/j.procs.2021.01.130.
    [7]B. Babayigit and H. Sattuf, "An IIoT and Web-based Low-Cost SCADA System for Industrial Automation," in 2019 11th International Conference on Electrical and Electronics Engineering (ELECO), 28-30 Nov. 2019 2019, pp. 890-894, doi: 10.23919/ELECO47770.2019.8990553.
    [8]T.-j. Li, C.-y. Zhao, and Y.-m. Zhang, "Real-time thermal error prediction model for CNC lathes using a new one-dimension lumped capacity method," The International Journal of Advanced Manufacturing Technology, vol. 117, no. 1, pp. 425-436, 2021/11/01 2021, doi: 10.1007/s00170-021-07692-1.
    [9]S. S. V. Keshav Kolla, D. M. Lourenço, A. A. Kumar, and P. Plapper, "Retrofitting of legacy machines in the context of Industrial Internet of Things (IIoT)," Procedia Computer Science, vol. 200, pp. 62-70, 2022/01/01/ 2022, doi: https://doi.org/10.1016/j.procs.2022.01.205.
    [10]B. Luo, H. Wang, H. Liu, B. Li, and F. Peng, "Early Fault Detection of Machine Tools Based on Deep Learning and Dynamic Identification," IEEE Transactions on Industrial Electronics, vol. 66, no. 1, pp. 509-518, 2019, doi: 10.1109/TIE.2018.2807414.
    [11]K. Kannan, N. Arunachalam, A. Chawla, and S. Natarajan, "Multi-Sensor Data Analytics for Grinding Wheel Redress Life Estimation- An Approach towards Industry 4.0," Procedia Manufacturing, vol. 26, pp. 1230-1241, 2018/01/01/ 2018, doi: https://doi.org/10.1016/j.promfg.2018.07.160.
    [12]C. Czwick and R. Anderl, "Data Pre-Processing Method for Industrie 4.0 Applications," Procedia Computer Science, vol. 200, pp. 327-336, 2022/01/01/ 2022, doi: https://doi.org/10.1016/j.procs.2022.01.231.
    [13]V. Prakash, C. Savaglio, L. Garg, S. Bawa, and G. Spezzano, "Cloud- and Edge-based ERP systems for Industrial Internet of Things and Smart Factory," Procedia Computer Science, vol. 200, pp. 537-545, 2022/01/01/ 2022, doi: https://doi.org/10.1016/j.procs.2022.01.251
    [14]W. Liu, C. Kong, Q. Niu, J. Jiang, and X. Zhou, "A method of NC machine tools intelligent monitoring system in smart factories," Robotics and Computer-Integrated Manufacturing, vol. 61, p. 101842, 2020/02/01/ 2020, doi: https://doi.org/10.1016/j.rcim.2019.101842.
    [15]王飛,於雙月,朱金輝,李柳妲,陳絕"基於乙太網通訊的工業設備數據實時採集研究" (in 繁體中文), 裝備製造技術, no. 2019年 08, pp. 138-143,147, 2019.
    [16]C. Liu and X. Xu, "Cyber-physical Machine Tool – The Era of Machine Tool 4.0," Procedia CIRP, vol. 63, pp. 70-75, 2017/01/01/ 2017, doi: https://doi.org/10.1016/j.procir.2017.03.078.
    [17]M. Saez, F. Maturana, K. Barton, and D. Tilbury, "Anomaly detection and productivity analysis for cyber-physical systems in manufacturing," in 2017 13th IEEE Conference on Automation Science and Engineering (CASE), 20-23 Aug. 2017 2017, pp. 23-29, doi: 10.1109/COASE.2017.8256070.
    [18]A. A. Neto, B. S. Carrijo, J. G. Romanzini Brock, F. Deschamps, and E. P. de Lima, "Digital twin-driven decision support system for opportunistic preventive maintenance scheduling in manufacturing," Procedia Manufacturing, vol. 55, pp. 439-446, 2021/01/01/ 2021, doi: https://doi.org/10.1016/j.promfg.2021.10.060.
    [19]J. Fan, L. Xue, Y. Liu, and W. Li, "Reliability analysis of spindle system of CNC grinder based on fault data," The International Journal of Advanced Manufacturing Technology, vol. 117, no. 9, pp. 3169-3183, 2021/12/01 2021, doi: 10.1007/s00170-021-07552-y.
    [20]K. Zhu, G. Li, and Y. Zhang, "Big Data Oriented Smart Tool Condition Monitoring System," IEEE Transactions on Industrial Informatics, vol. 16, no. 6, pp. 4007-4016, 2020, doi: 10.1109/TII.2019.2957107.
    [21]K. M. K and P. Kannadaguli, "IoT Based CNC Machine Condition Monitoring System Using Machine Learning Techniques," in 2020 IEEE 9th International Conference on Communication Systems and Network Technologies (CSNT), 10-12 April 2020 2020, pp. 61-65, doi: 10.1109/CSNT48778.2020.9115762.
    [22]M. Pilar Lambán, P. Morella, J. Royo, and J. Carlos Sánchez, "Using industry 4.0 to face the challenges of predictive maintenance: A key performance indicators development in a cyber physical system," Computers & Industrial Engineering, vol. 171, p. 108400, 2022/09/01/ 2022, doi: https://doi.org/10.1016/j.cie.2022.108400.
    [23]L. Zhou and H. Guo, "Anomaly Detection Methods for IIoT Networks," in 2018 IEEE International Conference on Service Operations and Logistics, and Informatics (SOLI), 31 July-2 Aug. 2018 2018, pp. 214-219, doi: 10.1109/SOLI.2018.8476769

    無法下載圖示 全文公開日期 2025/06/16 (校內網路)
    全文公開日期 2025/06/16 (校外網路)
    全文公開日期 2025/06/16 (國家圖書館:臺灣博碩士論文系統)
    QR CODE