An Intelligent Approach for Intrusion Detection in Industrial Control System
Source abstract
Abstract
Supervisory control and data acquisition (SCADA) systems are computer systems that gather and analyze real-time data, distributed control systems are specially designed automated control system that consists of geographically distributed control elements, and other smaller control systems such as programmable logic controllers are industrial solid-state computers that monitor inputs and outputs and make logic-based decisions. In recent years, there has been a lot of focus on the security of industrial control systems. Due to the advancement in information technologies, the risk of cyberattacks on industrial control system has been drastically increased. Because they are so inextricably tied to human life, any damage to them might have devastating consequences. To provide an efficient solution to such problems, this paper proposes a new approach to intrusion detection. First, the important features in the dataset are determined by the difference between the distribution of unlabeled and positive data which is deployed for the learning process. Then, a prior estimation of the class is proposed based on a support vector machine. Simulation results show that the proposed approach has better anomaly detection performance than existing algorithms.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Smart Grid Security and Resilience · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (53)
Show source-provided references
1. Application perspective on cybersecurity testbed for industrial control systems10.3390/s21238119 ↗
2. Security challenges in industry 4.0 PLC systems10.3390/app11219785 ↗
3. Uncovering the cyber security challenges in healthcare10.1016/S1353-4858(20)30046-5 ↗
4. Advancing the cybersecurity of the healthcare system with self-optimizing and self-adaptive artificial intelligence (part 2)10.1007/s12553-022-00691-6 ↗
5. Analysis of security issues and countermeasures for the industrial Internet of Things10.3390/app11209393 ↗
6. Privacy-preserving data aggregation for smart grid with user anonymity and designated recipients
7. Intrusion detection system based on in-depth understandings of industrial control logic
8. Anomaly detection in ICS datasets with machine learning algorithms10.32604/csse.2021.014384 ↗
9. Industrial control intrusion detection approach based on multiclassification GoogLeNet-LSTM model10.1155/2019/6757685 ↗
10. An intrusion detection system based on multi-level clustering for hierarchical wireless sensor networks10.3390/s151128960 ↗
11. Network traffic analysis over clustering-based collective anomaly detection10.1016/j.comnet.2022.108760 ↗
12. Network traffic anomaly detection method based on a multi-scale residual classifier10.1016/j.comcom.2022.10.024 ↗
13. Building auto-encoder intrusion detection system based on random forest feature selection10.1016/j.cose.2020.101851 ↗
14. A systematic mapping study and empirical comparison of data-driven intrusion detection techniques in industrial control networks10.1007/s11831-022-09767-y ↗
15. Network intrusion detection method based on PCA and Bayes algorithm
16. Detection of cyberattacks and anomalies in cyber-physical systems: Approaches, data sources evaluation10.3390/a16020085 ↗
17. An intrusion detection method for industrial control systems based on bidirectional simple recurrent unit10.1016/j.compeleceng.2021.107049 ↗
18. Securing the operations in SCADA-IoT platform based industrial control system using an ensemble of deep belief networks10.1016/j.asoc.2018.06.017 ↗
19. CNN-based method for the development of cyber-attacks detection algorithms in industrial control systems10.1016/j.cose.2021.102585 ↗
20. Cyber-physical security analysis for anomalies in transmission protection systems10.1109/TIA.2019.2928500 ↗
21. Explaining the attributes of a deep learning based intrusion detection system for industrial control networks
22. Web intrusion detection system combined with feature analysis and SVM optimization
23. Machine learning for internet of things anomaly detection under low-quality data10.1177/15501329221133765 ↗
24. HML-IDS: A hybrid-multilevel anomaly prediction approach for intrusion detection in SCADA systems10.1109/ACCESS.2019.2925838 ↗
25. Online cyber-attack detection in the industrial control system: A deep reinforcement learning approach
26. TGAN-AD: Transformer-based GAN for anomaly detection of time series data
27. Detection of cyberattacks in industrial control systems using enhanced principle component analysis and hypergraph-based convolution neural network (EPCA-HG-CNN)10.1109/TIA.2020.2977872 ↗
28. Network intrusion detection based on deep learning model optimized with rule-based hybrid feature selection
29. Feature selection using an improved gravitational search algorithm10.1109/ACCESS.2019.2935833 ↗
30. A novel intrusion detection system based on an optimal hybrid kernel extreme learning machine10.1016/j.knosys.2020.105648 ↗
31. Bayesian kernel two-sample testing10.1080/10618600.2022.2067547 ↗
32. A rate of convergence for mixture proportion estimation, with application to learning from noisy labels
33. Semi-supervised learning of class balance under class-prior change by distribution matching10.1016/j.neunet.2013.11.010 ↗
34. Class prior estimation from positive and unlabeled data10.1587/transinf.E97.D.1358 ↗
35. Class-prior estimation for learning from positive and unlabeled data10.1007/s10994-016-5604-6 ↗
36. Estimating the class prior for positive and unlabeled data via logistic regression10.1007/s11634-021-00444-9 ↗
37. Analysis of learning from positive and unlabeled data
38. Convex formulation of multiple instances learning from positive and unlabeled bags10.1016/j.neunet.2018.05.001 ↗
39. Weakly supervised learning with positive and unlabeled data for automatic brain tumor segmentation10.3390/app122110763 ↗
40. Best-in-class imitation: Non-negative positive-unlabeled imitation learning from imperfect demonstrations10.1016/j.ins.2022.04.015 ↗
41. Learning from positive and unlabeled data: A survey10.1007/s10994-020-05877-5 ↗
42. Revisiting batch normalization for training low-latency deep spiking neural networks from scratch10.3389/fnins.2021.773954 ↗
43. Deep stacking network for intrusion detection
44. UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)
45. WADI: A water distribution testbed for research in the design of secure cyber-physical systems
46. Using convolutional neural networks to network intrusion detection for cyber threats
47. A deep learning approach for intrusion detection using recurrent neural networks10.1109/ACCESS.2017.2762418 ↗
48. IEC 60870-5-104 Intrusion Detection Dataset. [Online]. Available: https://zenodo.org/record/7108614
49. DNP3 Intrusion Detection Dataset. [Online]. Available: https://zenodo.org/record/7348493
50. https://standards.ieee.org/ieee/C37.118.1/4902/
51. https://iec61850.dvl.iec.ch/
52. https://www.dnp.org/About/Overview-of-DNP3-Protocol
53. https://www.ipcomm.de/protocol/IEC104/en/sheet.html