An Intrusion Detection System (IDS) provides a front-line defensemechanism for the Industrial Control System (ICS) dedicated to keeping the process operations running continuously for 24 hours in a day and 7 days in a...An Intrusion Detection System (IDS) provides a front-line defensemechanism for the Industrial Control System (ICS) dedicated to keeping the process operations running continuously for 24 hours in a day and 7 days in a week.A well-known ICS is the Supervisory Control and Data Acquisition (SCADA)system. It supervises the physical process from sensor data and performs remotemonitoring control and diagnostic functions in critical infrastructures. The ICScyber threats are growing at an alarming rate on industrial automation applications. Detection techniques with machine learning algorithms on public datasets,suitable for intrusion detection of cyber-attacks in SCADA systems, as the firstline of defense, have been detailed. The machine learning algorithms have beenperformed with labeled output for prediction classification. The activity trafficbetween ICS components is analyzed and packet inspection of the dataset is performed for the ICS network. The features of flow-based network traffic areextracted for behavior analysis with port-wise profiling based on the data baseline,and anomaly detection classification and prediction using machine learning algorithms are performed.展开更多
基金This work was conducted at the IoT and wireless communication protocols laboratory,International Islamic University Malaysia and is partially sponsored by the Publication-Research initiative grant scheme no.P-RIGS18-003-0003.
文摘An Intrusion Detection System (IDS) provides a front-line defensemechanism for the Industrial Control System (ICS) dedicated to keeping the process operations running continuously for 24 hours in a day and 7 days in a week.A well-known ICS is the Supervisory Control and Data Acquisition (SCADA)system. It supervises the physical process from sensor data and performs remotemonitoring control and diagnostic functions in critical infrastructures. The ICScyber threats are growing at an alarming rate on industrial automation applications. Detection techniques with machine learning algorithms on public datasets,suitable for intrusion detection of cyber-attacks in SCADA systems, as the firstline of defense, have been detailed. The machine learning algorithms have beenperformed with labeled output for prediction classification. The activity trafficbetween ICS components is analyzed and packet inspection of the dataset is performed for the ICS network. The features of flow-based network traffic areextracted for behavior analysis with port-wise profiling based on the data baseline,and anomaly detection classification and prediction using machine learning algorithms are performed.
