Abstract:Industrial control systems are critical to the operation of industrial facilities, especially for critical infrastructures, such as refineries, power grids, and transportation systems. Similar to other information systems, a significant threat to industrial control systems is the attack from cyberspace---the offensive maneuvers launched by "anonymous" in the digital world that target computer-based assets with the goal of compromising a system's functions or probing for information. Owing to the importance of industrial control systems, and the possibly devastating consequences of being attacked, significant endeavors have been attempted to secure industrial control systems from cyberattacks. Among them are intrusion detection systems that serve as the first line of defense by monitoring and reporting potentially malicious activities. Classical machine-learning-based intrusion detection methods usually generate prediction models by learning modest-sized training samples all at once. Such approach is not always applicable to industrial control systems, as industrial control systems must process continuous control commands with limited computational resources in a nonstop way. To satisfy such requirements, we propose using online learning to learn prediction models from the controlling data stream. We introduce several state-of-the-art online learning algorithms categorically, and illustrate their efficacies on two typically used testbeds---power system and gas pipeline. Further, we explore a new cost-sensitive online learning algorithm to solve the class-imbalance problem that is pervasive in industrial intrusion detection systems. Our experimental results indicate that the proposed algorithm can achieve an overall improvement in the detection rate of cyberattacks in industrial control systems.

Research and Evaluation of Intelligent Threat Detection Under Industrial Internet

Text Classification and Threat Intelligence Generation for Industrial Control System Security

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

Machine Learning-Based Threat Identification of Industrial Internet

An AI-Powered Network Threat Detection System

Deep Learning and Industrial Internet Security: Application and Challenges

Dynamic Defense Method for Industrial Control Networks based on Shadow Honeynet

A Real-time Intrusion Detection Method for Industrial Control Network Based on Heterogeneous Feature Extractor

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

A Threat Recognition Solution of Edge Data Security in Industrial Internet

Detecting Cyberattacks in Industrial Control Systems Using Online Learning Algorithms

A Hierarchical Intrusion Detection System for Industrial Control Networks based on EtherNet/IP

Industrial Anomaly Detection and Attack Classification Method Based on Convolutional Neural Network.

Efficient Privacy-Preserving Federated Deep Learning for Network Intrusion of Industrial IoT

Deep-Learning-Based Weak Electromagnetic Intrusion Detection Method for Zero Touch Networks on Industrial IoT

Current Problems and Solutions of Industrial Control Network Intrusion Detection: A Brief Survey

Power Intelligent Terminal Intrusion Detection Based on Deep Learning and Cloud Computing

An Intelligent Secure Fault Classification and Identification Scheme for Mining Valuable Information in IIoT

A Review of Hybrid Cyber Threats Modelling and Detection Using Artificial Intelligence in IIoT

AI Enhanced Automatic Response System for Resisting Network Threats.

Research on Deep Detection Technology of Abnormal Behavior of Power Industrial Control System