arrow
Return

USMD: UnSupervised Misbehaviour Detection for Multi-Sensor Data

delete2023-01-01
delete16
PRE
AI
A
Abdullah Alsaedi *
Z
Zahir Tari
R
Redowan Mahmud
N
Nour Moustafa
A
Abdun Naser Mahmood
A
Adnan Anwar
DOI:10.1109/TDSC.2022.3143493delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Cyber-Physical Systems (CPSs) enable Information Technology to be integrated with Operation Technology to efficiently monitor and manage the physical processes of various critical infrastructures. Recent incidents in cyber ecosystems have shown that CPSs are becoming increasingly vulnerable to complex attacks. These incidents often lead to sensing and actuation misbehaviour by illegal manipulations of data, which can severely impact the underlying physical processes of critical infrastructures. Current research acknowledges that IT-based security measures cannot entirely protect CPSs from such threats. Moreover, they are not designed to monitor the measurement level activities of physical processes, and they fail to mitigate blended cyberattacks, especially multi-stage and zero-day ones. This article addresses these limitations by proposing a framework, named UnSupervised Misbehaviour Detection (USMD), comprising a deep neural network that learns about a system's expected behaviour from data-driven representations. USMD can identify in real-time the attacks on CPSs by using the long-short term memory and Attention method for multi-sensor data. The USMD's performance is evaluated on various known data sets (i.e., ToN_IoT, SWaT, WADI and Gas pipeline datasets). The experimental results indicate that the superior performance of USMD compared with six state-of-the-art methods, which we implemented and extensively tested. USMD achieves F-scores of 0.9699 and 0.9702 on SWaT and WADI datasets, respectively.
Keywords:
Data models
Monitoring
Computer crime
Mathematical models
Deep learning
Australia
Representation learning
Misbehaviour detection
cybersecurity
deep learning
cyber-physical systems
industrial Internet of Things

Journal

IEEE Transactions on Dependable and Secure Computing cover
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
Papers:
2.4K
Citations:
9.6K

Organization

L
La Trobe University
Scholars:
1.1W
Papers: 1.1W
Citations: 1.5W
D
Deakin University
Scholars:
2.0W
Papers: 2.1W
Citations: 2.8W