An improved autoencoder-based approach for anomaly detection in industrial control systems

• Published in: Systems science & control engineering Vol. 12; no. 1
• Main Authors: Aslam, Muhammad Muzamil, Tufail, Ali, De Silva, Liyanage Chandratilak, Haji Mohd Apong, Rosyzie Anna Awg, Namoun, Abdallah
• Format: Journal Article
• Language: English
• Published: Taylor & Francis Group 31-12-2024
• Subjects: Anomaly detection; deep learning; ICS; security; SWaT
• ISSN: 2164-2583; 2164-2583
• DOI: 10.1080/21642583.2024.2334303

Security is a complex issue in critical infrastructure like industrial control systems (ICS) since its leakages cause critical damage. Protecting the ICS environment from external threats, cyber-attacks, and natural disasters is important. Various works have been done on anomaly detection in ICS, and it has been identified that these proposed approaches are the sole models associated with them. Although there is a research gap in anomaly detection methodologies because of their computational complexity. To overcome the research gap of high false positive rate (precision), accuracy, and computational complexity in the literature, the study presents an Improved autoencoder (ImpAE) anomaly detection methodology for anomaly detection in ICS. The proposed methodology is a deep learning-based model to build anomaly detectors that alarm the attacks affecting ICS security. This methodology follows a flexible and modular design that permits a group of numerous detectors to get suitable detection. To express the suitability of the proposed model, we implemented it on the Secure water testbed (SWat) dataset, which is collected from a working water treatment plant. Experimental work shows that by using ImpAE, gaining a precision of 0.993 and an accuracy of 96%, in comparision to the existing results in the literature. With precision and accuracy, we gained a recall of 0.673 and an F1-Score of 0.771, which is better than the average of the other works. The used dataset was attained from ITrust Center, Singapore University of Digital Science, reliable for anomaly detection in an ICS environment.