The detection of sensor signal attacks in industrial control systems

Abstract

To improve productivity and efficiency in industrial manufacturing, the fourth industrial revolution leads to the implementation of Cyber Physical Systems (CPS) and Internet of Things (IoT) in the industrial environment. Ubiquitous communication makes CPS susceptible to external influences, which can have a negative intention; for instance, CPS are prone to various attacks and malicious threats by different adversaries. The impact of an attack on the system can lead to anomalies and serious consequences for system parts or the system as a whole. Security mechanisms must be developed in order to timely detect different attacks and to keep the system safe and protected. In this paper, a method for sensor signal attacks detection in a continuous time controlled systems has been proposed. The method is based on Support Vector Machines (SVM) and tested on the data obtained from the Secure Water Treatment (SWaT) testbed, a scaled-down plant that produces purified water.

Detection of cyber-attacks in systems with distributed control based on support vector regression

“…Namely, using our approach [5], [13], a current value of the signal x i is estimated from the buffer of previous k values x i-k ,...,x i-1 . Thus, ε-SVR training set has the following form:…”

“…The method we present in this paper is based on insensitive support vector regression (ε-SVR) and it belongs to a group of data-centric techniques. In our previous work [5] we have explored the possibilities of ε-SVR based sensory signal cyber-attack detection on the publicly available dataset obtained from a scaled down water treatment plant. The method has shown great potential; nevertheless, its application was carried out offline.…”

“…SWaT testbed processes overview is presented in[16] 3. It should be noted that in[5] we have considered LIT101 sensor…”

Security Audit of a Blockchain-Based Industrial Application Platform

“…Sensor: sensors in the architecture are often connected to machines via a simple fieldbus and are unsecured. This can create multiple attack surfaces, such as for data spoofing [27].…”