Skip to main content

Machine Learning in Industrial Control System Security: A Survey

  • Conference paper
  • First Online:
Proceedings of 2019 Chinese Intelligent Systems Conference (CISC 2019)

Part of the book series: Lecture Notes in Electrical Engineering ((LNEE,volume 594))

Included in the following conference series:

Abstract

Industrial control system (ICS) is becoming more and more open to the outside world for the advancement of Industrial Internet, which means people can have access to the industrial control system with traditional internet-based methods. However, the connections with outside world make ICS exposed to numerous unpredictable dangers. In addition, artificial intelligence (AI) has made great progress and applying AI to other fields is the trend in both academia and industry. This paper will introduce the basic information of ICS and review related works in anomaly detection based on AI. Based on the analysis of previous researches and the features of ICS, the prospect of anomaly detection of ICS is forecasted.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 169.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 219.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 299.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Yanbo D, Peng Z (2017) Jamming attacks against control systems: a survey. In: International conference on intelligent computing for sustainable energy and environment, pp 566–574

    Google Scholar 

  2. WINICSSEC Technologies. Statistics of ICS Vulnerability. ICS Vulnerability Database. http://ivd.winicssec.com/index.php/Home/Index/index.html. Accessed 10 May 2019

  3. Pan S, Morris T, Adhikari U (2015) Developing a hybrid intrusion detection system using data mining for power systems. IEEE Trans Smart Grid 6(6):1

    Article  Google Scholar 

  4. Pan S, Morris T, Adhikari U (2015) Classification of disturbances and cyber-attacks in power systems using heterogeneous time-synchronized data. 11th IEEE Trans Ind Inf 11(3):650–662

    Article  Google Scholar 

  5. Goh J, Adepu S, Junejo KN (2016) A dataset to support research in the design of secure water treatment systems. In: 11th international conference on critical information infrastructures security. Springer, Cham

    Google Scholar 

  6. Morris T, Zach T, Ian T (2015) Industrial control system simulation and data logging for intrusion detection system research. In: 7th annual southeastern cyber security summit (2015)

    Google Scholar 

  7. Antoine L, José MF (2016) Providing SCADA network data sets for intrusion detection research. In: 9th USENIX workshop on security experimentation and test (2016)

    Google Scholar 

  8. Sestito GS (2018) A method for anomalies detection in Real Time Ethernet data traffic applied to PROFINET. IEEE Trans Ind Inf 14(5):2171–2180

    Article  Google Scholar 

  9. Zhang H, Zhu S, Ma X (2017) A novel RNN-GBRBM based feature decoder for anomaly detection technology in industrial control network. IEICE Trans Inf Syst D(8):1780–1789

    Article  Google Scholar 

  10. Zhang H, Zhu S, Zhao J (2016) Anomaly detection in industrial control networks using hybrid LDA-autoencoder based models. In: International conference on computer, electronic engineering and information science, vol 63(2), pp 53–58

    Google Scholar 

  11. Schneider P, Böttinger K (2018) High-performance unsupervised anomaly detection for cyber-physical system networks. In: Cyber-physical systems integrate computing and communication capabilities

    Google Scholar 

  12. Wan M, Song Y, Jing Y (2018) Function-aware anomaly detection based on wavelet neural network for industrial control communication. Secur Commun Networks 2018(5):1–11

    Article  Google Scholar 

  13. Tamura K, Matsuura K (2019) Improvement of anomaly detection performance using packet flow regularity in industrial control networks. IEICE Trans Fundam Electron Commun Comput Sci E102-A(1):65–73

    Article  Google Scholar 

  14. Feng C, Li TT (2017) Multi-level anomaly detection in industrial control systems via package signatures and LSTM networks. In: 47th IEEE/IFIP International Conference on Dependable Systems and Networks. IEEE, Denver

    Google Scholar 

  15. Gabriel V, Rodrigo SM, Bogaz Z (2017) Flow-based intrusion detection for SCADA networks using supervised learning. In: XVII Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais, pp 167–181

    Google Scholar 

  16. Dong H, Peng D (2018) Research on abnormal detection of ModbusTCP/IP protocol based on one-class SVM. In: Youth Academy Annual Conference of Chinese Association of Automation

    Google Scholar 

  17. Pin HW, Liao IE (2018) An intrusion detection method based on log sequence clustering of honeypot for Modbus TCP protocol. In: IEEE international conference on applied system invention, pp 255–258

    Google Scholar 

  18. Alfonso V, Richard M, Matthew B (2016) Anomaly detection in electrical substation circuits via unsupervised machine learning. In: 17th international conference on information reuse and integration (IRI). IEEE, Pittburgh

    Google Scholar 

  19. Fan Z, Hansaka ADEK (2019) Multi-layer data-driven cyber-attack detection system for industrial control systems based on network, system and process data. IEEE Trans Ind Inf

    Google Scholar 

  20. Sagnik B, Rui M (2019) Packet-data anomaly detection in PMU-based state estimator using convolutional neural network. Int J Electr Power Energy Syst 107:690–702

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Jingling Zhao .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2020 Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Jiang, D., Zhao, J. (2020). Machine Learning in Industrial Control System Security: A Survey. In: Jia, Y., Du, J., Zhang, W. (eds) Proceedings of 2019 Chinese Intelligent Systems Conference. CISC 2019. Lecture Notes in Electrical Engineering, vol 594. Springer, Singapore. https://doi.org/10.1007/978-981-32-9698-5_35

Download citation

Publish with us

Policies and ethics