Title
DAICS: A Deep Learning Solution for Anomaly Detection in Industrial Control Systems
Abstract
Deep Learning is emerging as an effective technique to detect sophisticated cyber-attacks targeting Industrial Control Systems (ICSs). The conventional detection approach is to learn the “normal” behaviour of the system, to be then able to label noteworthy deviations from it as anomalies. However, the normal behaviour of ICSs continuously evolves over time for multiple reasons, such as update/replacement of devices, workflow modifications or others. As a consequence, the accuracy of the anomaly detection process may be dramatically affected with a considerable amount of false alarms being generated. This article presents <sc xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">DAICS</small> , a novel deep learning framework with a modular design to fit in large ICSs. The key component of the framework is a 2-branch neural network that learns the changes in the ICS behaviour with a small number of data samples and a few gradient updates. This is supported by an automatic tuning mechanism of the detection threshold that takes into account the changes in the prediction error under normal operating conditions. In this regard, no specialised human intervention is needed to update the other parameters of the system. <sc xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">DAICS</small> has been evaluated using publicly available datasets and shows an increased detection rate and accuracy compared to state-of-the-art approaches, as well as higher robustness to additive noise.
Year
DOI
Venue
2022
10.1109/TETC.2021.3073017
IEEE Transactions on Emerging Topics in Computing
Keywords
DocType
Volume
Anomaly detection,domain shift,deep learning,industrial control networks
Journal
10
Issue
ISSN
Citations 
2
2168-6750
0
PageRank 
References 
Authors
0.34
14
3
Name
Order
Citations
PageRank
Maged Abdelaty100.34
Roberto Doriguzzi Corin211614.39
Domenico Siracusa37119.37