MARATTO

article · Neural Networks

SCADA securing system using deep learning to prevent cyber infiltration

202349 citationsOpen accessCape Coast Technical University

In plain language

Industrial operations rely on Supervisory Control and Data Acquisition architectures to monitor and automate machinery over network connections. Because these systems are frequently connected to the internet without built-in security frameworks, they face considerable risks from cyber-attacks. An intrusion detection method combining the Genetically Seeded Flora feature optimisation algorithm with a Transformer Neural Network addresses these vulnerabilities. Instead of relying on traditional signature-based detection methods, this approach identifies deviations and shifts in operational patterns that indicate unauthorised interference. Experimental evaluations using the benchmark WUSTL-IIOT-2018 industrial control systems dataset demonstrate the capability of the technique. The combined model outperforms standard deep learning architectures, including Residual Neural Networks, Recurrent Neural Networks, and Long Short-Term Memory networks, delivering superior accuracy and computational efficiency in identifying cyber intrusions within industrial control networks.

Key takeaways

  • Industrial control architectures remain vulnerable to cyber infiltration due to continuous internet connectivity and absent internal security frameworks.
  • The Genetically Seeded Flora Transformer Neural Network identifies potential cyber intrusions by tracking shifts in operational network patterns rather than relying on standard signatures.
  • Tests on the WUSTL-IIOT-2018 dataset show the model achieves higher accuracy and efficiency than Residual Neural Networks, Recurrent Neural Networks, and Long Short-Term Memory networks.

Why it matters

Industrial machinery and infrastructure depend heavily on supervisory networks to function continuously. When these networks are breached, the physical operation of essential services can be disrupted. Employing pattern-based deep learning helps protect vital industrial systems from novel cyber threats that traditional signature-based security tools frequently fail to recognise, strengthening resilience against attacks.

Commercialisation angle

This method could provide network security monitoring software for operators of industrial control and automation machinery. The technology appears to be applied and tested in an experimental research setting, having demonstrated performance on a standard industrial control dataset rather than in live operational environments. Industrial cybersecurity providers seeking to replace or augment signature-based network intrusion detection tools could explore the model to improve anomaly detection efficiency.

AI-generated from the published abstract. Always read the original work before citing.

Abstract

Supervisory Control and Data Acquisition (SCADA) systems are computer-based control architectures specifically engineered for the operation of industrial machinery via hardware and software models. These systems are used to project, monitor, and automate the state of the operational network through the utilization of ethernet links, which enable two-way communications. However, as a result of their constant connectivity to the internet and the lack of security frameworks within their internal architecture, they are susceptible to cyber-attacks. In light of this, we have proposed an intrusion detection algorithm, intending to alleviate this security bottleneck. The proposed algorithm, the Genetically Seeded Flora (GSF) feature optimization algorithm, is integrated with Transformer Neural Network (TNN) and functions by detecting changes in operational patterns that may be indicative of an intruder's involvement. The proposed Genetically Seeded Flora Transformer Neural Network (GSFTNN) algorithm stands in stark contrast to the signature-based method employed by traditional intrusion detection systems. To evaluate the performance of the proposed algorithm, extensive experiments are conducted using the WUSTL-IIOT-2018 ICS SCADA cyber security dataset. The results of these experiments indicate that the proposed algorithm outperforms traditional algorithms such as Residual Neural Networks (ResNet), Recurrent Neural Networks (RNN), and Long Short-Term Memory (LSTM) in terms of accuracy and efficiency.

Research topics

  • Network Security and Intrusion Detection
  • Smart Grid Security and Resilience
  • Advanced Malware Detection Techniques

Read the original research

This page summarises published work. The authoritative version sits with the publisher.

DOI: 10.1016/j.neunet.2023.05.047

Is something wrong with this record? Report it or request removal.

Discussion

Discuss this research

Have you built on this work, tried to replicate it, or seen it applied in practice? Share what you know. Verified researchers and MARATTO™ domain experts can open a discussion, and any member can reply. Contributions are reviewed before they appear.

No discussion yet. Open the first thread.