研究生: |
黃千瑋 CHIEN-WEI HUANG |
---|---|
論文名稱: |
具網路流量檢測與防火牆之工業物聯網系統開發 An Industrial Internet of Things (IIoT) system with network traffic detection and firewall |
指導教授: |
李維楨
WEI-CHEN LEE |
口試委員: |
李維楨
WEI-CHEN LEE 梁書豪 SHU-HAO LIANG 吳國彰 KUO-CHANG WU |
學位類別: |
碩士 Master |
系所名稱: |
工程學院 - 機械工程系 Department of Mechanical Engineering |
論文出版年: | 2023 |
畢業學年度: | 111 |
語文別: | 中文 |
論文頁數: | 74 |
中文關鍵詞: | 工業4.0 、物聯網 、資訊安全 、防火牆 、網路流量檢測 |
外文關鍵詞: | Industry 4.0, IoT (Internet of Things), Cybersecurity, Firewall, Network traffic detection |
相關次數: | 點閱:214 下載:0 |
分享至: |
查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報 |
隨著網路的發展,物聯網逐漸興起應用的層面也越來越廣泛,傳統的工業以大量製造降低成本的商業模式為主。然而為了因應現代市場的快速變化、少子化以及人力成本的提高,企業透過轉型來降低製造成本。在工業4.0的推動下,製造業面臨數位轉型的挑戰,要轉型成智慧工廠的第一步需要與工廠內的機臺建立通訊,在生產過程中能夠監控機臺並且收集加工數據有助於提升整體的生產效率與產品品質。本研究以台灣工業界常用之CNC控制器品牌發那科(FANUC)與PLC控制器品牌三菱(MITSUBISHI)分別開發對應之物聯網系統。使用FOCAS Library與FANUC控制器進行通訊、採集數據與監控工具機。數據傳輸的過程呼叫使用SharpPcap功能擷取流量封包,並使用防火牆建立規則過濾封包的流動,與三菱PLC通訊的方法使用MX Component進行連線,來獲取數據與監控狀態。
本研究建立了一套具有資安功能之物聯網系統來與工具機通訊,採集加工數據並將數據儲存至雲端,達到資料數位化。在數據傳輸的過程中考慮了網路安全方面之問題,將流經電腦與工具機端口之網路封包擷取至系統中供使用者參考,並透過防火牆將不明來源之IP位址進行封鎖。過往以插入USB隨身碟將NC程式上傳至工具機的方法,改為將隨身碟插入到電腦中後,再利用本系統進行上傳,降低工具機因隨身碟可能夾帶不明程式造成機器受到攻擊的可能性。
With the development of the Internet, the application of the Internet of Things (IoT) has become increasingly widespread. Traditional industries have primarily focused on mass production to reduce costs. However, in response to the rapid changes in the modern market, declining birth rates, and increasing labor costs, businesses are undergoing transformations to lower manufacturing costs. Under the impetus of Industry 4.0, the manufacturing industry is facing the challenge of digital transformation. The first step towards becoming a smart factory is to establish communication with the machines within the factory. Monitoring the machines and collecting processing data during the production process helps improve overall production efficiency and product quality. In this study, IoT systems corresponding to commonly used CNC controllers in the Taiwanese industrial sector, such as FANUC and Mitsubishi PLC controllers, were developed. The FOCAS Library and FANUC controllers were used for communication, data collection, and monitoring of machine tools. During the data transmission process, the SharpPcap function was utilized to capture packet flows, and firewall rules were established to control inbound and outbound packet traffic. The MX Component was employed for communication with the Mitsubishi PLC to obtain data and monitor its status.
This study established a set of Internet of Things system with information security function to communicate with machine tools, data collection, and cloud storage, achieving data digitization. Network security issues were considered during the data transmission process. Network packets passing through the computer and machine tool ports were captured and made available for user reference. Unknown IP addresses were blocked through the firewall. The conventional method of uploading NC programs to machine tools by inserting USB flash drives was replaced with the process of inserting the flash drive into the computer and utilizing this system for uploading, reducing the possibility of machine tool attacks due to potentially malicious programs carried by USB flash drives.
[1]Trend Micro, "Security Intelligence Threat Report," Trend Micro Security Intelligence[Online]. Posted: Mar. 15, 2023. Available: https://www.trendmicro.com/zh_tw/security-intelligence/threat-report.html.
[2]Clearswift, "Insider Threat: 74% Security Incidents Come from Extended Enterprise, Not Hacking Groups,"Clearswift Press Releases, [Online]. Posted: Sep. 22, 2017.Available: https://www.clearswift.com/resources/press-releases/insider-threat-74-security-incidents-come-extended-enterprise-not-hacking-groups
[3]A. Martins, J. Lucas, H. Costelha, and C. Neves, "Developing an OPC UA Server for CNC Machines," Procedia Computer Science, vol. 180, pp. 561-570, 2021/01/01/ 2021, doi: 10.1016/j.procs.2021.01.276.
[4]F. Kohnhäuser, D. Meier, F. Patzer, and S. Finster, "On the Security of IIoT Deployments: An Investigation of Secure Provisioning Solutions for OPC UA," IEEE Access, vol. 9, pp. 99299-99311, 2021, doi: 10.1109/ACCESS.2021.3096062.
[5]M. Boyang, L. Maoyue, L. Xianli, W. Lihui, and S. Y. Liang, "Open architecture CNC system based on soft-integrated communication," Procedia CIRP, vol. 72, pp. 671-676, 2018/01/01/ 2018, doi: https://doi.org/10.1016/j.procir.2018.03.079.
[6]C. F. Erazo Navas, A. E. Yepes, S. Abolghasem, and G. Barbieri, "MTConnect-based decision support system for local machine tool monitoring," Procedia Computer Science, vol. 180, pp. 69-78, 2021/01/01/ 2021, doi: https://doi.org/10.1016/j.procs.2021.01.130.
[7]B. Babayigit and H. Sattuf, "An IIoT and Web-based Low-Cost SCADA System for Industrial Automation," in 2019 11th International Conference on Electrical and Electronics Engineering (ELECO), 28-30 Nov. 2019 2019, pp. 890-894, doi: 10.23919/ELECO47770.2019.8990553.
[8]T.-j. Li, C.-y. Zhao, and Y.-m. Zhang, "Real-time thermal error prediction model for CNC lathes using a new one-dimension lumped capacity method," The International Journal of Advanced Manufacturing Technology, vol. 117, no. 1, pp. 425-436, 2021/11/01 2021, doi: 10.1007/s00170-021-07692-1.
[9]S. S. V. Keshav Kolla, D. M. Lourenço, A. A. Kumar, and P. Plapper, "Retrofitting of legacy machines in the context of Industrial Internet of Things (IIoT)," Procedia Computer Science, vol. 200, pp. 62-70, 2022/01/01/ 2022, doi: https://doi.org/10.1016/j.procs.2022.01.205.
[10]B. Luo, H. Wang, H. Liu, B. Li, and F. Peng, "Early Fault Detection of Machine Tools Based on Deep Learning and Dynamic Identification," IEEE Transactions on Industrial Electronics, vol. 66, no. 1, pp. 509-518, 2019, doi: 10.1109/TIE.2018.2807414.
[11]K. Kannan, N. Arunachalam, A. Chawla, and S. Natarajan, "Multi-Sensor Data Analytics for Grinding Wheel Redress Life Estimation- An Approach towards Industry 4.0," Procedia Manufacturing, vol. 26, pp. 1230-1241, 2018/01/01/ 2018, doi: https://doi.org/10.1016/j.promfg.2018.07.160.
[12]C. Czwick and R. Anderl, "Data Pre-Processing Method for Industrie 4.0 Applications," Procedia Computer Science, vol. 200, pp. 327-336, 2022/01/01/ 2022, doi: https://doi.org/10.1016/j.procs.2022.01.231.
[13]V. Prakash, C. Savaglio, L. Garg, S. Bawa, and G. Spezzano, "Cloud- and Edge-based ERP systems for Industrial Internet of Things and Smart Factory," Procedia Computer Science, vol. 200, pp. 537-545, 2022/01/01/ 2022, doi: https://doi.org/10.1016/j.procs.2022.01.251
[14]W. Liu, C. Kong, Q. Niu, J. Jiang, and X. Zhou, "A method of NC machine tools intelligent monitoring system in smart factories," Robotics and Computer-Integrated Manufacturing, vol. 61, p. 101842, 2020/02/01/ 2020, doi: https://doi.org/10.1016/j.rcim.2019.101842.
[15]王飛,於雙月,朱金輝,李柳妲,陳絕"基於乙太網通訊的工業設備數據實時採集研究" (in 繁體中文), 裝備製造技術, no. 2019年 08, pp. 138-143,147, 2019.
[16]C. Liu and X. Xu, "Cyber-physical Machine Tool – The Era of Machine Tool 4.0," Procedia CIRP, vol. 63, pp. 70-75, 2017/01/01/ 2017, doi: https://doi.org/10.1016/j.procir.2017.03.078.
[17]M. Saez, F. Maturana, K. Barton, and D. Tilbury, "Anomaly detection and productivity analysis for cyber-physical systems in manufacturing," in 2017 13th IEEE Conference on Automation Science and Engineering (CASE), 20-23 Aug. 2017 2017, pp. 23-29, doi: 10.1109/COASE.2017.8256070.
[18]A. A. Neto, B. S. Carrijo, J. G. Romanzini Brock, F. Deschamps, and E. P. de Lima, "Digital twin-driven decision support system for opportunistic preventive maintenance scheduling in manufacturing," Procedia Manufacturing, vol. 55, pp. 439-446, 2021/01/01/ 2021, doi: https://doi.org/10.1016/j.promfg.2021.10.060.
[19]J. Fan, L. Xue, Y. Liu, and W. Li, "Reliability analysis of spindle system of CNC grinder based on fault data," The International Journal of Advanced Manufacturing Technology, vol. 117, no. 9, pp. 3169-3183, 2021/12/01 2021, doi: 10.1007/s00170-021-07552-y.
[20]K. Zhu, G. Li, and Y. Zhang, "Big Data Oriented Smart Tool Condition Monitoring System," IEEE Transactions on Industrial Informatics, vol. 16, no. 6, pp. 4007-4016, 2020, doi: 10.1109/TII.2019.2957107.
[21]K. M. K and P. Kannadaguli, "IoT Based CNC Machine Condition Monitoring System Using Machine Learning Techniques," in 2020 IEEE 9th International Conference on Communication Systems and Network Technologies (CSNT), 10-12 April 2020 2020, pp. 61-65, doi: 10.1109/CSNT48778.2020.9115762.
[22]M. Pilar Lambán, P. Morella, J. Royo, and J. Carlos Sánchez, "Using industry 4.0 to face the challenges of predictive maintenance: A key performance indicators development in a cyber physical system," Computers & Industrial Engineering, vol. 171, p. 108400, 2022/09/01/ 2022, doi: https://doi.org/10.1016/j.cie.2022.108400.
[23]L. Zhou and H. Guo, "Anomaly Detection Methods for IIoT Networks," in 2018 IEEE International Conference on Service Operations and Logistics, and Informatics (SOLI), 31 July-2 Aug. 2018 2018, pp. 214-219, doi: 10.1109/SOLI.2018.8476769