Abstract:Critical industrial infrastructures are currently facing increasing cyberspace threats in their underlying information and communication systems. The advanced monitoring, control, and management functionalities of the industrial systems firmly rely on the reliable and secure operations of the industrial control system (ICS) network. This article characterizes the ICS network traffic and presents a scalable and efficient solution for real-time ICS network traffic anomaly detection, considering various forms of ICS anomaly events. The events due to the cyberattacks, malicious operating behaviors, and network anomalies can be effectively detected without sophisticated computational requirements and retrieval of communication protocols. The proposed hybrid statistical-machine learning model integrates a seasonal autoregressive integration moving average (SARIMA)-based dynamic threshold model and a long short-term memory (LSTM) model to jointly identify the abnormal traffic patterns with low false omission rates. The proposed solution is extensively evaluated at a realistic ICS cyber–physical system (CPS) testbed, and the numerical results confirm its high detection accuracy and low computational complexity. Note to Practitioners—This article was motivated by the challenge of real-time anomaly detection in industrial cyber–physical systems (CPSs). The existing industrial control system (ICS) network anomaly detection solutions are generally carried out based on a single model based on the historian database and cannot dynamically classify the abnormal conditions in a real-time fashion. A novel hybrid statistical-machine learning model is developed that integrates a seasonal autoregressive integration moving average (SARIMA)-based dynamic threshold model and a long short-term memory (LSTM) model to jointly identify the anomalous events through traffic pattern analysis. The proposed anomaly detection solution can efficiently provide accurate detection for cyberattacks, malicious operating behaviors, and network anomalies while meeting the real-time requirements of ICS networks. The proposed solution can be deployed in the realistic ICS CPSs, e.g., the power generation system, gas pipeline systems, and urban railway transportation systems. The preliminary numerical results obtained from the ICS-CPS testbed suggested that it can provide high detection accuracy with low computational complexity and, hence, can be adopted with minimal deployment hurdles.

Trustworthy intelligent industrial monitoring architecture for early event detection by exploiting social IoT

TrustData: Trustworthy and Secured Data Collection for Event Detection in Industrial Cyber-Physical System

Intelligent Sensor Information System For Public Transport - To Safely Go

Trustworthy and Reliable Deep Learning-based Cyberattack Detection in Industrial IoT

Efficient Fault-Tolerant Information Barrier Coverage in Internet of Things

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

TrustSys: Trusted Decision Making Scheme for Collaborative Artificial Intelligence of Things

Anomaly events classification and detection system in critical industrial internet of things infrastructure using machine learning algorithms

Applied artificial intelligence framework for smart evacuation in industrial disasters

Design of Efficient Based Artificial Intelligence Approaches for Sustainable of Cyber Security in Smart Industrial Control System

A novel extended Internet of things (IoT) Cybersecurity protection based on adaptive deep learning prediction for industrial manufacturing applications

Intrusion Detection Framework for Industrial Internet of Things Using Software Defined Network

Real Time Collaborative Processing for Event Detection and Monitoring for Disaster Management in IoT Environment

Hybrid Statistical-Machine Learning for Real-Time Anomaly Detection in Industrial Cyber–Physical Systems

Deep learning-based intrusion detection approach for securing industrial Internet of Things

IoT-Based Harmful Toxic Gases Monitoring and Fault Detection on the Sensor Dataset Using Deep Learning Techniques

Secure smart home architecture for ambient-assisted living using a multimedia Internet of Things based system in smart cities

Toward security monitoring of industrial Cyber-Physical systems via hierarchically distributed intrusion detection

Internet of things-based secure architecture to automate industry

Applying Adaptive Security Techniques for Risk Analysis of Internet of Things (IoT)-Based Smart Agriculture