Abstract:Online food security and industrial environments and sustainability-related industries are highly confidential and in urgent need for network traffic analysis to attain proper security information to avoid attacks from anywhere in the world. The integration of cutting-edge technology such as the Internet of things (IoT) has resulted in a gradual increase in the number of vulnerabilities that may be exploited in supervisory control and data acquisition (SCADA) systems. In this research, we present a network intrusion detection system for SCADA networks that is based on deep learning. The goal of this system is to defend ICSs against network-based assaults that are both conventional and SCADA-specific. An empirical evaluation of a number of classification techniques including k-nearest neighbors (KNN), linear discriminant analysis (LDA), random forest (RF), convolution neural network (CNN), and integrated gated recurrent unit (GRU) is reported in this paper. The suggested algorithms were tested on a genuine industrial control system (SCADA), which was known as the WUSTL-IIoT-2018 and WUSTL-IIoT-20121 datasets. SCADA system operators are now able to augment proposed machine learning and deep learning models with site-specific network attack traces as a result of our invention of a re-training method to handle previously unforeseen instances of network attacks. The empirical results, using realistic SCADA traffic datasets, show that the proposed machine learning and deep-learning-based approach is well-suited for network intrusion detection in SCADA systems, achieving high detection accuracy and providing the capability to handle newly emerging threats. The accuracy performance attained by the KNN and RF algorithms was superior and achieved a near-perfect score of 99.99%, whereas the CNN-GRU model scored an accuracy of 99.98% using WUSTL-IIoT-2018. The Rf and GRU algorithms achieved >99.75% using the WUSTL-IIoT-20121 dataset. In addition, a statistical analysis method was developed in order to anticipate the error that exists between the target values and the prediction values. According to the findings of the statistical analysis, the KNN, RF, and CNN-GRU approaches were successful in achieving an R2 > 99%. This was demonstrated by the fact that the approach was able to handle previously unknown threats in the industrial control systems (ICSs) environment.

Instruction Detection in SCADA/Modbus Network Based on Machine Learning

Intrusion Detection Model of SCADA Using Graphical Features

Industrial control network security situation awareness based on improved C-SVC

Recent Advances in Machine Learning-based Anomaly Detection for Industrial Control Networks

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Design of Efficient Based Artificial Intelligence Approaches for Sustainable of Cyber Security in Smart Industrial Control System

Evaluation of Machine Learning-based Anomaly Detection Algorithms on an Industrial Modbus/TCP Data Set

Anomaly Detection for Industrial Control Networks using Machine Learning with the help from the Inter-Arrival Curves

Machine learning for intrusion detection in industrial control systems: challenges and lessons from experimental evaluation

Detecting Cyberattacks in Industrial Control Systems Using Online Learning Algorithms

Intrusion detection algorithm of industrial control network based on improved one-class support vector machine

Industrial Anomaly Detection and Attack Classification Method Based on Convolutional Neural Network.

A cyber-physical model for SCADA system and its intrusion detection

Intrusion Detection and identification System Design and Performance Evaluation for Industrial SCADA Networks

Machine Learning in Industrial Control System Security: A Survey

Machine Learning-Based Threat Identification of Industrial Internet

Machine Learning for Intrusion Detection in Industrial Control Systems: Applications, Challenges, and Recommendations

Classification and characterization of encoded traffic in SCADA network using hybrid deep learning scheme

Improving SIEM for Critical SCADA Water Infrastructures Using Machine Learning

Detecting Anomalies in Distributed Control Systems by Modeling Traffic Behaviors

Using machine learning to detect network intrusions in industrial control systems: a survey