Abstract:Nowadays, with the rapid development of industrial Internet technology, on the one hand, advanced industrial control systems (ICS) have improved industrial production efficiency. However, there are more and more cyber-attacks targeting industrial control systems. To ensure the security of industrial networks, intrusion detection systems have been widely used in industrial control systems, and deep neural networks have always been an effective method for identifying cyber attacks. Current intrusion detection methods still suffer from low accuracy and a high false alarm rate. Therefore, it is important to build a more efficient intrusion detection model. This paper proposes a hybrid deep learning intrusion detection method based on convolutional neural networks and bidirectional long short-term memory neural networks (CNN-BiLSTM). To address the issue of imbalanced data within the dataset and improve the model’s detection capabilities, the Synthetic Minority Over-sampling Technique-Edited Nearest Neighbors (SMOTE-ENN) algorithm is applied in the preprocessing phase. This algorithm is employed to generate synthetic instances for the minority class, simultaneously mitigating the impact of noise in the majority class. This approach aims to create a more equitable distribution of classes, thereby enhancing the model’s ability to effectively identify patterns in both minority and majority classes. In the experimental phase, the detection performance of the method is verified using two data sets. Experimental results show that the accuracy rate on the CICIDS-2017 data set reaches 97.7%. On the natural gas pipeline dataset collected by Lan Turnipseed from Mississippi State University in the United States, the accuracy rate also reaches 85.5%.

Industrial Anomaly Detection and Attack Classification Method Based on Convolutional Neural Network.

Cross-domain Anomaly Detection for Power Industrial Control System

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

Anomaly detection of industrial control systems based on transfer learning

Unknown Security Attack Detection of Industrial Control System by Deep Learning

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

Intrusion Detection Algorithm of Power Grid Industrial Control System Based on CNN

Industrial Control Intrusion Detection Approach Based on Multiclassification GoogLeNet-LSTM Model.

Design And Analysis Of Multimodel-Based Anomaly Intrusion Detection Systems In Industrial Process Automation

Hybrid Cloud-Edge Collaborative Data Anomaly Detection in Industrial Sensor Networks

Network Data Analysis and Anomaly Detection Using CNN Technique for Industrial Control Systems Security

An Efficient Anomaly Detection Method for Industrial Control Systems: Deep Convolutional Autoencoding Transformer Network

Recent Advances in Machine Learning-based Anomaly Detection for Industrial Control Networks

A New Industrial Intrusion Detection Method Based on CNN-BiLSTM

Instruction Detection in SCADA/Modbus Network Based on Machine Learning

A novel fully convolutional neural network approach for detection and classification of attacks on industrial IoT devices in smart manufacturing systems

Intrusion Detection Method for Industrial Control System Based on Parallel CNN-LSTM Neural Network Improved by Self-Attention

A deep hybrid learning model for detection of cyber attacks in industrial IoT devices

Network Anomaly Intrusion Detection Based on Deep Learning Approach