Using Decision Support to Fortify Industrial Control System Against CyberattacksShow others and affiliations
2024 (English)In: IEEE International Conference on Emerging Technologies and Factory Automation, ETFA, Institute of Electrical and Electronics Engineers Inc. , 2024Conference paper, Published paper (Refereed)
Abstract [en]
This paper presents a cybersecurity solution designed to fortify Industrial Control Systems (ICS) against cyberattacks. The proposed solution integrates a Network-based Intrusion Detection System (NIDS) with a Decision Support System (DSS), leveraging machine learning to detect anomalies in network data and employing a filtering mechanism to reduce false alarms. The NIDS protects a simulated ICS testbed, detecting anomalies and forwarding them to the DSS for further analysis and selection of mitigation strategies. We outline the system architecture and showcase promising outcomes from a prototype implementation. Our proof of concept evaluation demonstrates high accuracy in detecting attack scenarios. Challenges such as detection delays between attacks and potential mitigations high-light areas for future improvement. This research contributes to bridging the gap between ML-based IDS and security solutions, paving the way for enhanced cybersecurity in ICS environments.
Place, publisher, year, edition, pages
Institute of Electrical and Electronics Engineers Inc. , 2024.
Keywords [en]
Adversarial machine learning; Delay control systems; Intrusion detection; Machine learning; Cyber security; Cyber-attacks; Decision supports; In networks; Industrial control systems; Intrusion Detection Systems; Machine-learning; Network based intrusion detection systems; Network data; Support systems; Network intrusion
National Category
Computer and Information Sciences
Identifiers
URN: urn:nbn:se:ri:diva-76140DOI: 10.1109/ETFA61755.2024.10710892Scopus ID: 2-s2.0-85207853195OAI: oai:DiVA.org:ri-76140DiVA, id: diva2:1915298
Conference
29th IEEE International Conference on Emerging Technologies and Factory Automation, ETFA 2024. Padova. 10 September 2024 through 13 September 2024
Note
This work has been partially supported by the H2020ECSEL EU project Distributed Artificial Intelligent System(DAIS). DAIS (https://dais-project.eu/) has received fundingfrom the ECSEL JU under grant agreement No 101007273,and also funded by the Knowledge Foundation within theframework of INDTECH (Grant Number 20200132) and INDTECH + Research School project (Grant Number 20220132),participating companies and Malardalen University.
2024-11-222024-11-222025-09-23Bibliographically approved