【24h】

An HMM-Based Anomaly Detection Approach for SCADA Systems

机译:SCADA系统的基于肝癌的异常检测方法

获取原文

摘要

We describe the architecture of an anomaly detection system based on the Hidden Markov Model (HMM) for intrusion detection in Industrial Control Systems (ICS) and especially in SCADA systems interconnected using TCP/IP. The proposed system exploits the unique characteristics of ICS networks and protocols to efficiently detect multiple attack vectors. We evaluate the proposed system in terms of detection accuracy using as reference datasets made available by other researchers. These datasets refer to real industrial networks and contain a variety of identified attack vectors. We benchmark our findings against a large set of machine learning algorithms and demonstrate that our proposal exhibits superior performance characteristics.
机译:我们描述了基于隐马尔可夫模型(HMM)的异常检测系统的体系结构,用于工业控制系统(ICS)中的入侵检测,特别是在使用TCP / IP互连的SCADA系统中。所提出的系统利用ICS网络和协议的独特特征,以有效地检测多个攻击向量。我们根据其他研究人员提供的参考数据集,在检测精度方面评估所提出的系统。这些数据集是指真实的工业网络,并包含各种识别的攻击向量。我们对我们的调查结果进行基准,针对大量的机器学习算法,并证明我们的提案表现出卓越的性能特征。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号