Abstract:Online food security and industrial environments and sustainability-related industries are highly confidential and in urgent need for network traffic analysis to attain proper security information to avoid attacks from anywhere in the world. The integration of cutting-edge technology such as the Internet of things (IoT) has resulted in a gradual increase in the number of vulnerabilities that may be exploited in supervisory control and data acquisition (SCADA) systems. In this research, we present a network intrusion detection system for SCADA networks that is based on deep learning. The goal of this system is to defend ICSs against network-based assaults that are both conventional and SCADA-specific. An empirical evaluation of a number of classification techniques including k-nearest neighbors (KNN), linear discriminant analysis (LDA), random forest (RF), convolution neural network (CNN), and integrated gated recurrent unit (GRU) is reported in this paper. The suggested algorithms were tested on a genuine industrial control system (SCADA), which was known as the WUSTL-IIoT-2018 and WUSTL-IIoT-20121 datasets. SCADA system operators are now able to augment proposed machine learning and deep learning models with site-specific network attack traces as a result of our invention of a re-training method to handle previously unforeseen instances of network attacks. The empirical results, using realistic SCADA traffic datasets, show that the proposed machine learning and deep-learning-based approach is well-suited for network intrusion detection in SCADA systems, achieving high detection accuracy and providing the capability to handle newly emerging threats. The accuracy performance attained by the KNN and RF algorithms was superior and achieved a near-perfect score of 99.99%, whereas the CNN-GRU model scored an accuracy of 99.98% using WUSTL-IIoT-2018. The Rf and GRU algorithms achieved >99.75% using the WUSTL-IIoT-20121 dataset. In addition, a statistical analysis method was developed in order to anticipate the error that exists between the target values and the prediction values. According to the findings of the statistical analysis, the KNN, RF, and CNN-GRU approaches were successful in achieving an R2 > 99%. This was demonstrated by the fact that the approach was able to handle previously unknown threats in the industrial control systems (ICSs) environment.

A cyber-physical model for SCADA system and its intrusion detection

Intrusion Detection Model of SCADA Using Graphical Features

Industrial control network security situation awareness based on improved C-SVC

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Analysis of Malware-Induced Cyber Attacks in Cyber-Physical Power Systems

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

An asymmetric interdependent networks model for cyber-physical systems

Common criteria for security evaluation and malicious intrusion detection mechanism of dam supervisory control and data acquisition system

An Ensemble Learning-Based Cyber-Attacks Detection Method of Cyber-Physical Power Systems

Detecting Integrity Attacks on SCADA Systems

Combining ensemble methods and social network metrics for improving accuracy of OCSVM on intrusion detection in SCADA systems

Multi-Scale Traffic Aware Cybersecurity Situational Awareness Online Model for Intelligent Power Substation Communication Network

Quantitative Risk Assessment of Threats on SCADA Systems Using Attack Countermeasure Tree

Toward an Applied Cyber Security Solution in IoT-Based Smart Grids: An Intrusion Detection System Approach

Examining Cybersecurity of Cyberphysical Systems for Critical Infrastructures Through Work Domain Analysis

Toward security monitoring of industrial Cyber-Physical systems via hierarchically distributed intrusion detection

An Intelligent Security Defensive Model of SCADA Based on Multi-Agent in Oil and Gas Fields

SCO-RNN: A Behavioral-Based Intrusion Detection Approach for Cyber Physical Attacks in SCADA Systems

Assessment of Cyber-Physical Intrusion Detection and Classification for Industrial Control Systems

SCAPHY: Detecting Modern ICS Attacks by Correlating Behaviors in SCADA and PHYsical

Design of Efficient Based Artificial Intelligence Approaches for Sustainable of Cyber Security in Smart Industrial Control System