Behaviour-based attack detection and classification in cyber physical systems using machine learning

CPSS 2016 - Proceedings of the 2nd ACM International Workshop on Cyber-Physical System Security, Co-located with Asia CCS 2016

Volumn , Issue , 2016, Pages 34-43

  Junejo, Khurum Nazir ^a   Goh, Jonathan ^b  

^a KARACHI INSTITUTE OF ECONOMICS AND TECHNOLOGY   (Pakistan)

^b SINGAPORE UNIVERSITY OF TECHNOLOGY AND DESIGN   (Singapore)

Author keywords

[No Author keywords available]

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPLEX NETWORKS; COMPUTER CRIME; CRIME; EMBEDDED SYSTEMS; INTRUSION DETECTION; LEARNING SYSTEMS; WATER TREATMENT;

CONTROL COMPONENTS; CYBER PHYSICAL SYSTEMS (CPSS); CYBER-PHYSICAL SYSTEMS (CPS); FALSE POSITIVE RATES; OPERATING ENVIRONMENT; SIGNATURE BASED DETECTIONS; SYSTEMATIC TRAINING; WATER TREATMENT FACILITIES;

NETWORK SECURITY;

EID: 84978795140     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2899015.2899016     Document Type: Conference Paper

References (36)

1. Nsl-kdd dataset, 2006.
2. S. Adepu and A. Mathur. An investigation into the response of a water treatment system to cyber attacks. In Proceedings of the 17th IEEE High Assurance Systems Engineering Symposium (in Press), 2016.
3. I. Ahmad, M. Hussain, A. Alghamdi, and A. Alelaiwi. Enhancing svm performance in intrusion detection using optimal feature subset selection based on genetic principal components. Neural Computing and Applications, 24(7-8):1671-1682, 2014.
4. O. Al-Jarrah and A. Arafat. Network intrusion detection system using neural network classification of attack behavior. Journal of Advances in Information Technology Vol, 6(1), 2015.
5. R. Berthier and W. H. Sanders. Specification-based intrusion detection for advanced metering infrastructures. In Dependable Computing (PRDC), 2011 IEEE 17th Pacific Rim International Symposium on, pages 184-193. IEEE, 2011.
6. L. Breiman. Random forests. Machine learning, 45(1):5-32, 2001.
7. A. A. Cárdenas, S. Amin, Z.-S. Lin, Y.-L. Huang, C.-Y. Huang, and S. Sastry. Attacks against process control systems: risk assessment, detection, and response. In Proceedings of the 6th ACM symposium on information, computer and communications security, pages 355-366. ACM, 2011.
8. S. Cheung, B. Dutertre, M. Fong, U. Lindqvist, K. Skinner, and A. Valdes. Using model-based intrusion detection for scada networks.
9. N. Falliere, L. O. Murchu, and E. Chien. W32.stuxnet dossier.
10. N. Friedman, D. Geiger, and M. Goldszmidt. Bayesian network classifiers. Machine learning, 29(2-3):131-163, 1997.
11. T. P. Fries. A fuzzy-genetic approach to network intrusion detection. In Proceedings of the 10th annual conference companion on Genetic and evolutionary computation, pages 2141-2146. ACM, 2008.
12. W. Gao, T. Morris, B. Reaves, and D. Richey. On scada control system command and response injection and intrusion detection. In Proceedings of the 5th Annual Anti-Phishing Working Group eCrime Researchers Summit (eCrime), pages 1-9. IEEE, 2010.
13. W. Gao and T. H. Morris. On cyber attacks and signature based intrusion detection for modbus based industrial control systems. Journal of Digital Forensics, Security and Law, 9(1):37-56, 2014.
14. M. A. M. Hasan, M. Nasser, B. Pal, and S. Ahmad. Support vector machine and random forest modeling for intrusion detection systems. Journal of Intelligent Learning Systems and Applications, 2014, 2014.
15. S. Hettich and S. D. Bay. The uci kdd archive, 1999.
16. L. Koc, T. A. Mazzuchi, and S. Sarkani. A network intrusion detection system based on a hidden naïve bayes multiclass classifier. Expert Systems with Applications, 39(18):13492-13500, 2012.
17. V. Kumar, H. Chauhan, and D. Panwar. K-means clustering approach to analyze nsl-kdd intrusion detection dataset. International Journal of Soft Computing and Engineering (IJSCE) ISSN, pages 2231-2307, 2013.
18. H. Lin, A. Slagell, C. Di Martino, Z. Kalbarczyk, and R. K. Iyer. Adapting bro into scada: building a specification-based intrusion detection system for the dnp3 protocol. In Proceedings of the Eighth Annual Cyber Security and Information Intelligence Research Workshop, page 5. ACM, 2013.
19. O. Linda, T. Vollmer, and M. Manic. Neural network based intrusion detection system for critical infrastructures. In Neural Networks, 2009. IJCNN 2009. International Joint Conference on, pages 1827-1834. IEEE, 2009.
20. L. Maglaras and J. Jiang. Intrusion detection in scada systems using machine learning techniques. In Science and Information Conference (SAI), 2014, pages 626-631, Aug 2014.
21. R. Mitchell and I.-R. Chen. Behavior rule specification-based intrusion detection for safety critical medical cyber physical systems. Dependable and Secure Computing, IEEE Transactions on, 12(1):16-30, 2015.
22. T. Morris, A. Srivastava, B. Reaves, W. Gao, K. Pavurapu, and R. Reddi. A control system testbed to validate critical infrastructure protection concepts. International Journal of Critical Infrastructure Protection, 4(2):88-103, 2011.
23. Z. Muda, W. Yassin, M. Sulaiman, and N. Udzir. Intrusion detection based on k-means clustering and naïve bayes classification. In Information Technology in Asia (CITA 11), 2011 7th International Conference on, pages 1-6. IEEE, 2011.
24. P. Nader, P. Honeine, and P. Beauseroy. -norms in one-class classification for intrusion detection in scada systems. Industrial Informatics, IEEE Transactions on, 10(4):2308-2317, 2014.
25. P. Nader, P. Honeine, and P. Beauseroy. Mahalanobis-based one-class classification. In Machine Learning for Signal Processing (MLSP), 2014 IEEE International Workshop on, pages 1-6, 2014.
26. J. M. B. Palácios, J. R. B. Garay, A. M. Oliveira, and S. T. Kofuji. Intrusion detection system: A hybrid approach for cyber-physical environments. Technology, 39:193-204, 2013.
27. J. R. Quinlan. Improved use of continuous attributes in c4. 5. Journal of artificial intelligence research, pages 77-90, 1996.
28. S. Sahu and B. Mehtre. Network intrusion detection system using j48 decision tree. In Advances in Computing, Communications and Informatics (ICACCI), 2015 International Conference on, pages 2023-2026. IEEE, 2015.
29. H. Shi. Best-first decision tree learning. PhD thesis, Citeseer, 2007.
30. J. Slay and M. Miller. Lessons learned from the maroochy water breach. Springer, 2008.
31. C.-F. Tsai, Y.-F. Hsu, C.-Y. Lin, and W.-Y. Lin. Intrusion detection by machine learning: A review. Expert Systems with Applications, 36(10):11994-12000, 2009.
32. C.-H. Tsang, S. Kwong, and H. Wang. Genetic-fuzzy rule mining approach and evaluation of feature selection techniques for anomaly intrusion detection. Pattern Recognition, 40(9):2373-2391, 2007.
33. N. Wattanapongsakorn, P. Sangkatsanee, S. Srakaew, and C. Charnsripinyo. Classifying network attack types with machine learning approach. In Networked Computing (INC), 2011 The 7th International Conference on, pages 98-102, Sept 2011.
34. L. Xiao, Y. Chen, and C. K. Chang. Bayesian model averaging of bayesian network classifiers for intrusion detection. In Computer Software and Applications Conference Workshops (COMPSACW), 2014 IEEE 38th International, pages 128-133. IEEE, 2014.
35. N. Ye, S. M. Emran, Q. Chen, and S. Vilbert. Multivariate statistical analysis of audit trails for host-based intrusion detection. Computers, IEEE Transactions on, 51(7):810-820, 2002.
36. Y. Zhang, L. Wang, W. Sun, R. C. Green, M. Alam, et al Distributed intrusion detection system in a multi-layer network architecture of smart grids. Smart Grid, IEEE Transactions on, 2(4):796-808, 2011.