Abstract:Current Cyber-Physical Systems (CPSs) are sophisticated, complex, and equipped with networked sensors and actuators. As such, they have become further exposed to cyber-attacks. Recent catastrophic events have demonstrated that standard, human-based management of anomaly detection in complex systems is not efficient enough and have underlined the significance of automated detection, intelligent and rapid response. Nevertheless, existing anomaly detection frameworks usually are not capable of dealing with the dynamic and complicated nature of the CPSs. In this study, we introduce an unsupervised framework for anomaly detection based on an Attention-based Spatio-Temporal Autoencoder. In particular, we first construct statistical correlation matrices to characterize the system status across different time steps. Next, a 2D convolutional encoder is employed to encode the patterns of the correlation matrices, whereas an Attention-based Convolutional LSTM Encoder-Decoder (ConvLSTM-ED) is used to capture the temporal dependencies. More precisely, we introduce an input attention mechanism to adaptively select the most significant input features at each time step. Finally, the 2D convolutional decoder reconstructs the correlation matrices. The differences between the reconstructed correlation matrices and the original ones are used as indicators of anomalies. Extensive experimental analysis on data collected from all six stages of Secure Water Treatment (SWaT) testbed, a scaled-down version of a real-world industrial water treatment plant, demonstrates that the proposed model outperforms the state-of-the-art baseline techniques.

Anomaly Identification for Cyber-Physical Systems Subject to Replay Attacks and Sensor Faults

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

An Unsupervised Framework for Anomaly Detection in a Water Treatment System

Replay Attack Detection for Cyber-Physical Systems with Sensitive States

Anomaly Detection and Identification for Multiagent Systems Subjected to Physical Faults and Cyberattacks

Replay Attack Detection Based on Parity Space Method for Cyber-Physical Systems

An Active Detection Strategy Based on Dimensionality Reduction for False Data Injection Attacks in Cyber-Physical Systems

A Novel Approach for Discriminating Faults and Replay Attacks in Hybrid Systems

Distributed Secure State Estimation for Cyber-Physical Systems Against Replay Attacks via Multisensor Method

Detection of Hidden Attacks on Cyber-Physical Systems from Serial Magnitude and Sign Randomness Inconsistencies

Cost-effective Watermark Based Detector for Replay Attacks on Cyber-Physical Systems.

No Need to Know Physics: Resilience of Process-based Model-free Anomaly Detection for Industrial Control Systems

Reconstruction-based Multi-Scale Anomaly Detection for Cyber-Physical Systems

Deterministic Event-based Physical Watermarks Against Replay Attacks in Cyber-physical Systems

Anomaly Detection Method Based on Bilateral Features for CPPS

Enhanced stochastic coding framework for discriminating faults and cyber incidents in hybrid systems

Sequential Detection of Replay Attacks

Anomaly detection using isomorphic analysis for false data injection attacks in industrial control systems

Artificial immunity based distributed and fast anomaly detection for Industrial Internet of Things

Effective Anomaly Detection in Smart Home by Integrating Event Time Intervals