Unsupervised and Incremental Learning Orchestration for Cyber-Physical Security - Archive ouverte HAL Access content directly
Journal Articles Transactions on emerging telecommunications technologies Year : 2020

Unsupervised and Incremental Learning Orchestration for Cyber-Physical Security


Attacks on cyber-physical systems, such as nuclear and water treatment plants, have physical consequences that impact the lives of thousands of citizens. In such systems, it is mandatory to monitor the field network and detect potential threats before a problem occurs. This work proposes a hybrid approach that orchestrates unsupervised and incremental learning methods to detect threats that impact the control loops in a plant. We use online data processing to identify new attack vectors. We train the online incremental learning method as new attacks arrive. We also apply a one-class support vector machine to each monitored sensor or actuator to retrieve abnormal behaviors of their closed control loop. The proposed solution orchestrates the outputs from the two machine learning methods and alerts the system operators when it detects a threat. We evaluate the proposal on the Secure Water Treatment testbed dataset, and the results reveal that our proposal detects threats at more than 90% precision and with accuracy higher than 95%.
Fichier principal
Vignette du fichier
hal-02569404.pdf (303.86 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-02569404 , version 1 (04-12-2023)



Lúcio Henrik Amorim Reis, Andrés Felipe Murillo Piedrahita, Sandra Julieta Rueda Rodríguez, Natália Castro Fernandes, Dianne Scherly Varela de Medeiros, et al.. Unsupervised and Incremental Learning Orchestration for Cyber-Physical Security. Transactions on emerging telecommunications technologies, 2020, 31 (7), pp.e4011. ⟨10.1002/ett.4011⟩. ⟨hal-02569404⟩
60 View
9 Download



Gmail Facebook X LinkedIn More