A hybrid physics-based data-driven framework for anomaly detection in industrial control systems

MRG Raman, AP Mathur - IEEE Transactions on Systems, Man …, 2021 - ieeexplore.ieee.org
IEEE Transactions on Systems, Man, and Cybernetics: Systems, 2021ieeexplore.ieee.org
A method referred to as PbNN is proposed to detect cyber-physical attacks through the
identification of resulting anomalies in the process dynamics of the underlying ICS. Unlike
existing anomaly detectors based on an abstract knowledge acquired from operational data,
PbNN utilizes the design knowledge of ICS to learn the complex relationships among the
correlated components. Such relationships are accurately modeled using operational data
through the application of the deep convolution neural network. The proposed detector was …
A method referred to as PbNN is proposed to detect cyber-physical attacks through the identification of resulting anomalies in the process dynamics of the underlying ICS. Unlike existing anomaly detectors based on an abstract knowledge acquired from operational data, PbNN utilizes the design knowledge of ICS to learn the complex relationships among the correlated components. Such relationships are accurately modeled using operational data through the application of the deep convolution neural network. The proposed detector was implemented and evaluated in an operational secure water treatment plant by launching several real-time stealthy and coordinated attacks. The results indicate that PbNN outperforms the existing state-of-the-art machine learning anomaly detectors when compared using detection accuracy and the rate of false alarms.
ieeexplore.ieee.org
以上显示的是最相近的搜索结果。 查看全部搜索结果