Abstract:The swift embrace of Industry 4.0 paradigms has led to the growing convergence of Information Technology (IT) networks and Operational Technology (OT) networks. Traditionally isolated on air-gapped and fully trusted networks, OT networks are now becoming more interconnected with IT networks due to the advancement and applications of IoT. This expanded attack surface has led to vulnerabilities in Cyber–Physical Systems (CPSs), resulting in increasingly frequent compromises with substantial economic and life safety repercussions. The existing methods for the anomaly detection of security threats typically use simple threshold-based strategies or apply Machine Learning (ML) algorithms to historical data for the prediction of future anomalies. However, due to the high levels of heterogeneity across different CPS environments, minimizing the opportunities for transfer learning, and the scarcity of real-world data for training, the existing ML-based anomaly detection techniques suffer from a poor predictive performance. This paper introduces a hybrid anomaly detection approach designed to identify threats to CPSs by combining the signature-based anomaly detection typically utilized in IT networks, the threshold-based anomaly detection typically utilized in OT networks, and behavioural-based anomaly detection using Ensemble Learning (EL), which leverages the strengths of multiple ML algorithms against the same dataset to increase the accuracy. Multiple public research datasets were used to validate the proposed approach, with the hybrid methodology employing a divide-and-conquer strategy to offload the detection of certain cyber threats to computationally inexpensive signature-based and threshold-based methods using domain knowledge to minimize the size of the behavioural-based data needed for ML model training, thus achieving a higher accuracy over a reduced timeframe. The experimental results showed accuracy improvements of 4–7% over those of the conventional ML classifiers in performing anomaly detection across multiple datasets, which is particularly important to the operators of CPS environments due to the high financial and life safety costs associated with interruptions to system availability.

Rethinking compact abating probability modeling for open set recognition problem in Cyber-physical systems.

Convolutional Prototype Network for Open Set Recognition

Robustness Improvement for Cyber Physical System Based on an Optimization Model of Interdependent Constraints

Adversarial Compact Wrapping Classifier Learning for Open Set Recognition

Assurance Monitoring of Cyber-Physical Systems with Machine Learning Components

Real-time Cyber-Physical Security Solution Leveraging an Integrated Learning-Based Approach

An Ensemble Learning-Based Cyber-Attacks Detection Method of Cyber-Physical Power Systems

Adversarial Reciprocal Points Learning for Open Set Recognition

Open-Set Recognition of Screen Defects with Negative-Guided Augmented Prototype Generator and Open Feature Generation

The Arabidopsis gibberellin methyl transferase 1 suppresses gibberellin activity, reduces whole-plant transpiration and promotes drought tolerance in transgenic tomato.

Representation-Learning-Based CNN for Intelligent Attack Localization and Recovery of Cyber-Physical Power Systems

Unified Classification and Rejection: A One-versus-All Framework

Open-Set Object Detection Using Classification-free Object Proposal and Instance-level Contrastive Learning

Open-Set Biometrics: Beyond Good Closed-Set Models

Recognition Awareness: An Application of Latent Cognizance to Open-Set Recognition

Security establishment using deep convolutional network model in cyber-physical systems

Model-based Construction and Verification of Cyber-Physical Systems.

Towards Safe Machine Learning for CPS: Infer Uncertainty from Training Data

Synergetic proto-pull and reciprocal points for open set recognition

Enlarging Instance-specific and Class-specific Information for Open-set Action Recognition

Using Ensemble Learning for Anomaly Detection in Cyber–Physical Systems