A clustering-based approach to detect cyber attacks in process control systems. Kiss, I., Genge, B., & Haller, P. In 2015 IEEE 13th International Conference on Industrial Informatics (INDIN), pages 142–148, July, 2015. ISSN: 2378-363Xdoi abstract bibtex Modern Process Control Systems (PCS) exhibit an increasing trend towards the pervasive adoption of commodity, off-the-shelf Information and Communication Technologies (ICT). This has brought significant economical and operational benefits, but it also shifted the architecture of PCS from a completely isolated environment to an open, “system of systems” integration with traditional ICT systems, susceptible to traditional computer attacks. In this paper we present a novel approach to detect cyber attacks targeting measurements sent to control hardware, i.e., typically to Programmable Logical Controllers (PLC). The approach builds on the Gaussian mixture model to cluster sensor measurement values and a cluster assessment technique known as silhouette. We experimentally demonstrate that in this particular problem the Gaussian mixture clustering outperforms the k-means clustering algorithm. The effectiveness of the proposed technique is tested in a scenario involving the simulated Tennessee-Eastman chemical process and three different cyber attacks.
@inproceedings{kiss_clustering-based_2015,
title = {A clustering-based approach to detect cyber attacks in process control systems},
doi = {10.1109/INDIN.2015.7281725},
abstract = {Modern Process Control Systems (PCS) exhibit an increasing trend towards the pervasive adoption of commodity, off-the-shelf Information and Communication Technologies (ICT). This has brought significant economical and operational benefits, but it also shifted the architecture of PCS from a completely isolated environment to an open, “system of systems” integration with traditional ICT systems, susceptible to traditional computer attacks. In this paper we present a novel approach to detect cyber attacks targeting measurements sent to control hardware, i.e., typically to Programmable Logical Controllers (PLC). The approach builds on the Gaussian mixture model to cluster sensor measurement values and a cluster assessment technique known as silhouette. We experimentally demonstrate that in this particular problem the Gaussian mixture clustering outperforms the k-means clustering algorithm. The effectiveness of the proposed technique is tested in a scenario involving the simulated Tennessee-Eastman chemical process and three different cyber attacks.},
booktitle = {2015 {IEEE} 13th {International} {Conference} on {Industrial} {Informatics} ({INDIN})},
author = {Kiss, István and Genge, Béla and Haller, Piroska},
month = jul,
year = {2015},
note = {ISSN: 2378-363X},
keywords = {Clustering algorithms, Computer crime, Engines, Gaussian mixture model, Mathematical model, Process control},
pages = {142--148},
}
Downloads: 0
{"_id":"gYJqC2iQ3rYvcthE2","bibbaseid":"kiss-genge-haller-aclusteringbasedapproachtodetectcyberattacksinprocesscontrolsystems-2015","author_short":["Kiss, I.","Genge, B.","Haller, P."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","title":"A clustering-based approach to detect cyber attacks in process control systems","doi":"10.1109/INDIN.2015.7281725","abstract":"Modern Process Control Systems (PCS) exhibit an increasing trend towards the pervasive adoption of commodity, off-the-shelf Information and Communication Technologies (ICT). This has brought significant economical and operational benefits, but it also shifted the architecture of PCS from a completely isolated environment to an open, “system of systems” integration with traditional ICT systems, susceptible to traditional computer attacks. In this paper we present a novel approach to detect cyber attacks targeting measurements sent to control hardware, i.e., typically to Programmable Logical Controllers (PLC). The approach builds on the Gaussian mixture model to cluster sensor measurement values and a cluster assessment technique known as silhouette. We experimentally demonstrate that in this particular problem the Gaussian mixture clustering outperforms the k-means clustering algorithm. The effectiveness of the proposed technique is tested in a scenario involving the simulated Tennessee-Eastman chemical process and three different cyber attacks.","booktitle":"2015 IEEE 13th International Conference on Industrial Informatics (INDIN)","author":[{"propositions":[],"lastnames":["Kiss"],"firstnames":["István"],"suffixes":[]},{"propositions":[],"lastnames":["Genge"],"firstnames":["Béla"],"suffixes":[]},{"propositions":[],"lastnames":["Haller"],"firstnames":["Piroska"],"suffixes":[]}],"month":"July","year":"2015","note":"ISSN: 2378-363X","keywords":"Clustering algorithms, Computer crime, Engines, Gaussian mixture model, Mathematical model, Process control","pages":"142–148","bibtex":"@inproceedings{kiss_clustering-based_2015,\n\ttitle = {A clustering-based approach to detect cyber attacks in process control systems},\n\tdoi = {10.1109/INDIN.2015.7281725},\n\tabstract = {Modern Process Control Systems (PCS) exhibit an increasing trend towards the pervasive adoption of commodity, off-the-shelf Information and Communication Technologies (ICT). This has brought significant economical and operational benefits, but it also shifted the architecture of PCS from a completely isolated environment to an open, “system of systems” integration with traditional ICT systems, susceptible to traditional computer attacks. In this paper we present a novel approach to detect cyber attacks targeting measurements sent to control hardware, i.e., typically to Programmable Logical Controllers (PLC). The approach builds on the Gaussian mixture model to cluster sensor measurement values and a cluster assessment technique known as silhouette. We experimentally demonstrate that in this particular problem the Gaussian mixture clustering outperforms the k-means clustering algorithm. The effectiveness of the proposed technique is tested in a scenario involving the simulated Tennessee-Eastman chemical process and three different cyber attacks.},\n\tbooktitle = {2015 {IEEE} 13th {International} {Conference} on {Industrial} {Informatics} ({INDIN})},\n\tauthor = {Kiss, István and Genge, Béla and Haller, Piroska},\n\tmonth = jul,\n\tyear = {2015},\n\tnote = {ISSN: 2378-363X},\n\tkeywords = {Clustering algorithms, Computer crime, Engines, Gaussian mixture model, Mathematical model, Process control},\n\tpages = {142--148},\n}\n\n\n\n","author_short":["Kiss, I.","Genge, B.","Haller, P."],"key":"kiss_clustering-based_2015","id":"kiss_clustering-based_2015","bibbaseid":"kiss-genge-haller-aclusteringbasedapproachtodetectcyberattacksinprocesscontrolsystems-2015","role":"author","urls":{},"keyword":["Clustering algorithms","Computer crime","Engines","Gaussian mixture model","Mathematical model","Process control"],"metadata":{"authorlinks":{}},"html":""},"bibtype":"inproceedings","biburl":"https://bibbase.org/zotero/mh_lenguyen","dataSources":["iwKepCrWBps7ojhDx"],"keywords":["clustering algorithms","computer crime","engines","gaussian mixture model","mathematical model","process control"],"search_terms":["clustering","based","approach","detect","cyber","attacks","process","control","systems","kiss","genge","haller"],"title":"A clustering-based approach to detect cyber attacks in process control systems","year":2015}