Adaptable and Interpretable Framework for Anomaly Detection in SCADA-based industrial systems

Wadinger, Marek; Kvasnica, Michal

doi:10.1016/j.eswa.2024.123200

Cited by 3 publications

(1 citation statement)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Financial institutions can leverage multivariate time series analysis to detect fraudulent transactions. By analyzing customer data encompassing purchase location, time, and type alongside historical spending patterns, anomalies indicative of potential fraud attempts can be flagged [92,93]. In healthcare, multivariate time series analysis can be applied to analyze patient data like vital signs and lab results.…”

Section: Related Workmentioning

confidence: 99%

Securing the IoT Cyber Environment: Enhancing Intrusion Anomaly Detection With Vision Transformers

Sana,

Nazir,

Yang

et al. 2024

IEEE Access

View full text Add to dashboard Cite

Background and Motivation:The ever-expanding Internet of Things (IoT) landscape presents a double-edged sword. While it fosters interconnectedness, the vast amount of data generated by IoT devices creates a larger attack surface for cybercriminals. Intrusions in these environments can have severe consequences. To combat this growing threat, robust intrusion detection systems (IDS) are crucial. The data comprised by this attack is multivariate, highly complex, non-stationary, and nonlinear. To extract the complex patterns from this complex data, we require the most robust, optimized tools. Methods: Machine learning (ML) and deep learning (DL) have emerged as powerful tools for IDSs, offering high accuracy in detecting and preventing security breaches. This research delves into anomaly detection, a technique that identifies deviations from normal system behavior, potentially indicating attacks. Given the complexity of anomaly data, we explore methods to improve detection performance. Proposed Approach: This research investigates the design and evaluation of a novel IDS. We leverage and optimize supervised ML methods like tree-based Support Vector Machines (SVM), ensemble methods, and neural networks (NN) alongside the cutting-edge DL approach of long short-term memory (LSTM) and vision transformers (ViT). We optimized the hyperparameters of these algorithms using a robust Bayesian optimization approach. Results: The implemented ML models achieved impressive training accuracy, with Random Forest and Ensemble Bagged Tree surpassing 99.90% of accuracy, an AUC of 1.00, an F1-score, and a balanced Matthews Correlation Coefficient (MCC) of 99.78%. While the initial deep learning LSTM model yielded an accuracy of 99.97%, the proposed ViT architecture significantly boosted performance with 100% of all metrics, along with a validation accuracy of 78.70% and perfect training accuracy. Conclusion: Our findings demonstrate the potential of the proposed methods for enhanced attack and intrusion detection. This improved detection capability can be instrumental in safeguarding system integrity, identifying fraudulent activity, and optimizing system performance in IoT networks.

show abstract

Section: Related Workmentioning

confidence: 99%