Abstract:Nowadays, with the rapid development of industrial Internet technology, on the one hand, advanced industrial control systems (ICS) have improved industrial production efficiency. However, there are more and more cyber-attacks targeting industrial control systems. To ensure the security of industrial networks, intrusion detection systems have been widely used in industrial control systems, and deep neural networks have always been an effective method for identifying cyber attacks. Current intrusion detection methods still suffer from low accuracy and a high false alarm rate. Therefore, it is important to build a more efficient intrusion detection model. This paper proposes a hybrid deep learning intrusion detection method based on convolutional neural networks and bidirectional long short-term memory neural networks (CNN-BiLSTM). To address the issue of imbalanced data within the dataset and improve the model’s detection capabilities, the Synthetic Minority Over-sampling Technique-Edited Nearest Neighbors (SMOTE-ENN) algorithm is applied in the preprocessing phase. This algorithm is employed to generate synthetic instances for the minority class, simultaneously mitigating the impact of noise in the majority class. This approach aims to create a more equitable distribution of classes, thereby enhancing the model’s ability to effectively identify patterns in both minority and majority classes. In the experimental phase, the detection performance of the method is verified using two data sets. Experimental results show that the accuracy rate on the CICIDS-2017 data set reaches 97.7%. On the natural gas pipeline dataset collected by Lan Turnipseed from Mississippi State University in the United States, the accuracy rate also reaches 85.5%.

A Real-time Intrusion Detection Method for Industrial Control Network Based on Heterogeneous Feature Extractor

Hybrid Intrusion Detection System for Complicated Network

Multi-agent based hybrid Intrusion detection system

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

DL-IDS: Extracting Features Using CNN-LSTM Hybrid Network for Intrusion Detection System

Intrusion Detection Method for Industrial Control System Based on Parallel CNN-LSTM Neural Network Improved by Self-Attention

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

A New Industrial Intrusion Detection Method Based on CNN-BiLSTM

A Hierarchical Hybrid Intrusion Detection Model for Industrial Internet of Things

Robust Detection for Network Intrusion of Industrial IoT Based on Multi-Cnn Fusion

Multi-agent Intrusion Detection System Using Feature Selection Approach

Real-Time Intrusion Detection In Wireless Network: A Deep Learning-Based Intelligent Mechanism

Deep Feature Extraction in Intrusion Detection System

An Industrial Network Intrusion Detection Algorithm Based on Multifeature Data Clustering Optimization Model

A Hierarchical CNN-Transformer Model for Network Intrusion Detection

Idetector: A Novel Real-Time Intrusion Detection Solution for IoT Networks

Simplicity over Complexity: An ARN-Based Intrusion Detection Method for Industrial Control Network

A Hierarchical Intrusion Detection System for Industrial Control Networks based on EtherNet/IP

Real-time Anomaly Detection of Network Intrusions

Features Extraction Based On Deep Analysis Of Network Packets In Industrial Control Systems