Curse of system complexity and virtue of operational invariants : machine learning based system modeling and attack detection in CPS

Shahid, Muhammad Omer and Ahmed, Chuadhry Mujeeb and Palleti, Venkata Reddy and Zhou, Jianying; (2022) Curse of system complexity and virtue of operational invariants : machine learning based system modeling and attack detection in CPS. In: 2022 IEEE Conference on Dependable and Secure Computing (DSC). IEEE, GBR, pp. 1-8. ISBN 9781665421416 (https://doi.org/10.1109/dsc54232.2022.9888940)

[thumbnail of Shahid-etal-DSC-2022-Curse-of-system-complexity-and-virtue-of-operational invariants-machine-learning]
Preview
Text. Filename: Shahid_etal_DSC_2022_Curse_of_system_complexity_and_virtue_of_operational_invariants_machine_learning.pdf
Accepted Author Manuscript
License: Strathprints license 1.0

Download (1MB)| Preview

Abstract

Cyber Physical Systems (CPS) security has gained a lot of interest in recent years. Different approaches have been proposed to tackle the security challenges. Intrusion detection has been of most interest so far, involving design-based and data-based approaches. Design-based approaches require domain expertise and are not scalable, on the other hand, data-based approaches suffer from the lack of real-world datasets available for specific critical physical processes. In this work, a data collection effort is made on a realistic Water Distribution (WADI) test-bed. Collected data consists of both the normal operation as well as a range of attack scenarios. Next, machine learning-based system-modeling techniques are considered using the data from WADI. It is shown that the accuracy of system model-based intrusion detectors depends on the model accuracy and for non-linear processes, it is non-trivial to obtain accurate system models. Moreover, an operational invariants-based attack detection technique is proposed using the system design parameters. It is shown that using a simple rule-based anomaly detector performs better than the complex black-box data-based techniques.

ORCID iDs

Shahid, Muhammad Omer, Ahmed, Chuadhry Mujeeb ORCID logoORCID: https://orcid.org/0000-0003-3644-0465, Palleti, Venkata Reddy and Zhou, Jianying;