Abstract:The cyber-physical system (CPS) plays a crucial role in supporting critical infrastructure like water treatment facilities, gas stations, air conditioning components, and smart grids, which are essential to society. However, these systems are facing a growing susceptibility to a wide range of emerging attacks. Cyber-attacks against CPS have the potential to cause disruptions in the accurate sensing and actuation processes, resulting in significant harm to physical entities and posing concerns for the overall safety of society. Unlike common security measures like firewalls and encryption, which often aren't enough to deal with the unique problems that CPS architectures present, deploying machine learning-based intrusion detection systems (IDS) that are specifically made for CPS has become an important way to make them safer. The application of machine learning algorithms has been suggested as a means of mitigating cyber-attacks on CPS. However, the limited availability of labelled data pertaining to emerging attack techniques poses a significant challenge to the accurate detection of such attacks. In the given scenario, transfer learning emerges as a promising methodology for the detection of cyber-attacks, as it involves the implicit modelling of the system. In this research, we propose a new lightweight transfer learning method via ResNet50-CNN1D for intrusion detection in CPS. The Adaptive Gradient (Adagrad) optimizer was applied in the proposed model to minimize the loss function through the adjustment of network weight. We tested how well the suggested ResNet50-1D-CNN model worked using the UNSW-NB15 dataset and a control system dataset called HAI. The HAI dataset was taken from the testbed and based on a planned physical attack scenario. By calculating the coefficient scores for the top ten (10) features in the HAI and UNSW-NB15 data, it was possible to determine the relevance of a feature. The rationale behind employing transfer learning was to mitigate the complexity associated with the classification of cyber-attacks and runtime. The utilization of transfer learning resulted in notable reductions in both the training and testing times required for the detection of attacks. On the HAI data, the results showed an accuracy of 97.32%, recall of 98.41%, F1-score of 96.32%, and precision of 97.09%. On the UNSW-NB15 data, the results showed an accuracy of 99.89%, recall of 99.09%, F1-score of 98.01%, and precision of 98.70%.

A Lightweight Approach for Network Intrusion Detection in Industrial Cyber-Physical Systems Based on Knowledge Distillation and Deep Metric Learning

A Lightweight Approach for Network Intrusion Detection based on Self-Knowledge Distillation

Knowledge Distillation-Empowered Digital Twin for Anomaly Detection

KDDT: Knowledge Distillation-Empowered Digital Twin for Anomaly Detection

A Lightweight Pipeline Edge Detection Model Based on Heterogeneous Knowledge Distillation

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

An Enhanced Intrusion Detection System for IoT Networks Based on Deep Learning and Knowledge Graph

Reconstructed Graph Neural Network With Knowledge Distillation for Lightweight Anomaly Detection

ResNet50-1D-CNN: A New Lightweight ResNet50-One-Dimensional Convolution Neural Network Transfer Learning-Based Approach for Improved Intrusion Detection in Cyber-Physical Systems

Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning

Design and Development of a Deep Learning-Based Model for Anomaly Detection in IoT Networks

A Novel Intrusion Detection Method Based on Lightweight Neural Network for Internet of Things

Optimizing intrusion detection in industrial cyber-physical systems through transfer learning approaches

Improved Intrusion Detection Based on Hybrid Deep Learning Models and Federated Learning

An Industrial Intrusion Detection Method Based on Hybrid Convolutional Neural Networks with Improved TCN

DeepFed: Federated Deep Learning for Intrusion Detection in Industrial Cyber–Physical Systems

Deep learning-based intrusion detection approach for securing industrial Internet of Things

Network Anomaly Intrusion Detection Based on Deep Learning Approach

A Deep Learning Ensemble for Network Anomaly and Cyber-Attack Detection

Cyber Digital Twin with Deep Learning Model for Enterprise Products Management

Enhancing the security in IoT and IIoT networks: An intrusion detection scheme leveraging deep transfer learning