Machine learning for intrusion detection in industrial control systems: challenges and lessons from experimental evaluation

Gauthama Raman M.R., Chuadhry Mujeeb Ahmed, Aditya Mathur

Research output: Contribution to journalArticlepeer-review

Abstract

Gradual increase in the number of successful attacks against Industrial Control Systems (ICS) has led to an urgent need to create defense mechanisms for accurate and timely detection of the resulting process anomalies. Towards this end, a class of anomaly detectors, created using data-centric approaches, are gaining attention. Using machine learning algorithms such approaches can automatically learn the process dynamics and control strategies deployed in an ICS. The use of these approaches leads to relatively easier and faster creation of anomaly detectors compared to the use of design-centric approaches that are based on plant physics and design. Despite the advantages, there exist significant challenges and implementation issues in the creation and deployment of detectors generated using machine learning for city-scale plants. In this work, we enumerate and discuss such challenges. Also presented is a series of lessons learned in our attempt to meet these challenges in an operational plant.
Original languageEnglish
Article number27
Number of pages12
JournalCybersecurity
Volume4
Issue number1
DOIs
Publication statusPublished - 2 Aug 2021

Keywords

  • industrial control systems
  • ICS security
  • machine learning
  • intrusion detection
  • testbed and experimental study

Fingerprint

Dive into the research topics of 'Machine learning for intrusion detection in industrial control systems: challenges and lessons from experimental evaluation'. Together they form a unique fingerprint.

Cite this