Real-time anomaly intrusion detection for a clean water supply system, utilising machine learning with novel energy-based features

Robles-Durazno, Andres; Moradpoor, Naghmeh; McWhinnie, James; Russell, Gordon

Abstract

Industrial Control Systems have become a priority domain for cybersecurity practitioners due to the number of cyber-attacks against those systems has increased over the past few years. This paper proposes a real-time anomaly intrusion detector for a model of a clean water supply system. A testbed of such system is implemented using the Festo MPA Control Process Rig. A set of attacks to the testbed is conducted during the control process operation. During the attacks, the energy of the components is monitored and recorded to build a novel dataset for training and testing a total of five traditional supervised machine learning algorithms: K-Nearest Neighbour, Support Vector Machine, Decision Tree, Naïve Bayes and Multilayer Perceptron. The trained machine learning algorithms were built and deployed online, during the control system operation, for further testing. The performance obtained from offline and online training and testing steps are compared. The captures results show that KNN and SVM outperformed the rest of the algorithms by achieving high accuracy scores and low falsepositive, false-negative alerts.

Citation

Robles-Durazno, A., Moradpoor, N., McWhinnie, J., & Russell, G. (2020). Real-time anomaly intrusion detection for a clean water supply system, utilising machine learning with novel energy-based features. In 2020 International Joint Conference on Neural Networks (IJCNN). https://doi.org/10.1109/IJCNN48605.2020.9207462

• Conference Name: International Joint Conference on Neural Networks (IJCNN 2020)
• Conference Location: Glasgow, UK
• Start Date: Jul 19, 2020
• End Date: Jul 24, 2020
• Acceptance Date: Mar 20, 2020
• Online Publication Date: Sep 28, 2020
• Publication Date: 2020
• Deposit Date: Apr 6, 2020
• Publicly Available Date: Sep 28, 2020
• Publisher: Institute of Electrical and Electronics Engineers
• Series ISSN: 2161-4407
• Book Title: 2020 International Joint Conference on Neural Networks (IJCNN)
• DOI: https://doi.org/10.1109/IJCNN48605.2020.9207462
• Keywords: Industrial Control System, Energy Monitoring, SCADA, KNN, SVM, Anomaly Detection, IDS
• Public URL: http://researchrepository.napier.ac.uk/Output/2651220