AIセキュリティポータル K Program
Assessment of Cyber-Physical Intrusion Detection and Classification for Industrial Control Systems
Share
Abstract
The increasing interaction of industrial control systems (ICSs) with public networks and digital devices introduces new cyber threats to power systems and other critical infrastructure. Recent cyber-physical attacks such as Stuxnet and Irongate revealed unexpected ICS vulnerabilities and a need for improved security measures. Intrusion detection systems constitute a key security technology, which typically monitors cyber network data for detecting malicious activities. However, a central characteristic of modern ICSs is the increasing interdependency of physical and cyber network processes. Thus, the integration of network and physical process data is seen as a promising approach to improve predictability in real-time intrusion detection for ICSs by accounting for physical constraints and underlying process patterns. This work systematically assesses machine learning-based cyber-physical intrusion detection and multi-class classification through a comparison to its purely network data-based counterpart and evaluation of misclassifications and detection delay. Multiple supervised detection and classification pipelines are applied on a recent cyber-physical dataset, which describes various cyber attacks and physical faults on a generic ICS. A key finding is that the integration of physical process data improves detection and classification of all considered attack types. In addition, it enables simultaneous processing of attacks and faults, paving the way for holistic cross-domain root cause identification.
Cybersecurity in industrial control systems: Issues, technologies, and challenges
M. R. Asghar, Q. Hu, S. Zeadally
Published: 2019
A detailed investigation and analysis of using machine learning techniques for intrusion detection
P. Mishra, V. Varadharajan, U. Tupakula, E. S. Pilli
Published: 2019
A new perspective towards the development of robust data-driven intrusion detection for industrial control systems
A. Ayodeji, Y.-k. Liu, N. Chao, L.-q. Yang
Published: 2020
Multilayer data-driven cyber-attack detection system for industrial control systems based on network, system, and process data
F. Zhang, H. A. D. E. Kodituwakku, J. W. Hines, J. Coble
Published: 2019
An evaluation of selection method in the classification of scada datasets based on the characteristics of the data and priority of performance
J. Yeckle, S. Abdelwahed
Published: 2017
Privacy preservation intrusion detection technique for scada systems
M. Keshk, N. Moustafa, E. Sitnikova, G. Creech
Published: 2017
Machine learning for power system disturbance and cyber-attack discrimination
R. C. B. Hink, J. M. Beaver, M. A. Buckner, T. Morris, U. Adhikari, S. Pan
Published: 2014
Cloud-based cyber-physical intrusion detection for vehicles using deep learning
G. Loukas, T. Vuong, R. Heartfield, G. Sakellari, Y. Yoon, D. Gan
Published: 2017
Performance evaluation of cyber-physical intrusion detection on a robotic vehicle
T. P. Vuong, G. Loukas, D. Gan
Published: 2015
Decision tree-based detection of denial of service and command injection attacks on robotic vehicles
T. P. Vuong, G. Loukas, D. Gan, A. Bezemskij
Published: 2015
A hardware-in-the-loop water distribution testbed dataset for cyber-physical security testing
L. Faramondi, F. Flammini, S. Guarino, R. Setola
Published: 2021
Multi-source multi-domain data fusion for cyberattack detection in power systems
A. Sahu, Z. Mao, P. Wlazlo, H. Huang, K. Davis, A. Goulart, S. Zonouz
Published: 2021
The elements of statistical learning
J. Friedman, T. Hastie, R. Tibshirani
Published: 2009
Advanced machine learning techniques for building performance simulation: a comparative analysis
D. Chakraborty, H. Elzarka
Published: 2019
Learning from Imbalanced Data Sets
A. Fernndez, S. Garca, M. Galar, R. C. Prati, B. Krawczyk, F. Herrera
Published: 2018
Automatic choice of dimensionality for pca
T. Minka
Published: 2000
Share