Abstract:Online food security and industrial environments and sustainability-related industries are highly confidential and in urgent need for network traffic analysis to attain proper security information to avoid attacks from anywhere in the world. The integration of cutting-edge technology such as the Internet of things (IoT) has resulted in a gradual increase in the number of vulnerabilities that may be exploited in supervisory control and data acquisition (SCADA) systems. In this research, we present a network intrusion detection system for SCADA networks that is based on deep learning. The goal of this system is to defend ICSs against network-based assaults that are both conventional and SCADA-specific. An empirical evaluation of a number of classification techniques including k-nearest neighbors (KNN), linear discriminant analysis (LDA), random forest (RF), convolution neural network (CNN), and integrated gated recurrent unit (GRU) is reported in this paper. The suggested algorithms were tested on a genuine industrial control system (SCADA), which was known as the WUSTL-IIoT-2018 and WUSTL-IIoT-20121 datasets. SCADA system operators are now able to augment proposed machine learning and deep learning models with site-specific network attack traces as a result of our invention of a re-training method to handle previously unforeseen instances of network attacks. The empirical results, using realistic SCADA traffic datasets, show that the proposed machine learning and deep-learning-based approach is well-suited for network intrusion detection in SCADA systems, achieving high detection accuracy and providing the capability to handle newly emerging threats. The accuracy performance attained by the KNN and RF algorithms was superior and achieved a near-perfect score of 99.99%, whereas the CNN-GRU model scored an accuracy of 99.98% using WUSTL-IIoT-2018. The Rf and GRU algorithms achieved >99.75% using the WUSTL-IIoT-20121 dataset. In addition, a statistical analysis method was developed in order to anticipate the error that exists between the target values and the prediction values. According to the findings of the statistical analysis, the KNN, RF, and CNN-GRU approaches were successful in achieving an R2 > 99%. This was demonstrated by the fact that the approach was able to handle previously unknown threats in the industrial control systems (ICSs) environment.

Industrial control network security situation awareness based on improved C-SVC

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

An Improved Support Vector Machine Attack Detection Algorithm for Industry Controls System

Square Wave Attack Detection Based on PCA with Cosine Similarity and SVM

Intrusion Detection Model of SCADA Using Graphical Features

Insights on Cooperative Defense for Multiple Industrial Security Technologies

State Machine Based Malicious Packet Attack Detection and Security Situation Assessment

An Anomaly Detection and Scenario Classification Scheme Based on Fuzzy C-means Clustering

A cyber-physical model for SCADA system and its intrusion detection

Combining ensemble methods and social network metrics for improving accuracy of OCSVM on intrusion detection in SCADA systems

Leveraging Data Fitting and Trust Assessment to Improve the Security of Industrial Networks

Design of Efficient Based Artificial Intelligence Approaches for Sustainable of Cyber Security in Smart Industrial Control System

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

Analysis and Application of intelligent Power Control System Cyber Security Situation Awareness Based on Wavelet Neural Network

A Security Situation Prediction Model for Industrial Control Network Based on EP-CMA-ES

Multi-Scale Traffic Aware Cybersecurity Situational Awareness Online Model for Intelligent Power Substation Communication Network

Detecting Cyberattacks in Industrial Control Systems Using Online Learning Algorithms

An Intelligent Security Defensive Model of SCADA Based on Multi-Agent in Oil and Gas Fields

A Real-time Intrusion Detection Method for Industrial Control Network Based on Heterogeneous Feature Extractor

Enhanced Anomaly Detection in Industrial Control Systems aided by Machine Learning

Network Security Situation Awareness Technology Based on Multi-source Heterogeneous Data