Efficient cyber attack detection in industrial control systems using lightweight neural networks and pca
Open accessAbstract
Industrial control systems (ICSs) are widely used and vital to industry and society. Their failure can have severe impact on both the economy and human life. Hence, these systems have become an attractive target for physical and cyber attacks alike. In this article, we examine an attack detection method based on simple and lightweight neural networks, namely, 1D convolutional neural networks and autoencoders. We apply these networks to both the time and frequency domains of the data and discuss the pros and cons of each representation approach. The suggested method is evaluated on three popular public datasets, and detection rates matching or exceeding previously published detection results are achieved, while demonstrating a small footprint, short training and detection times, and generality. We also show the effectiveness of PCA, which, given proper data preprocessing and feature selection, can provide high attack detection rates in many settings. Finally, we study the proposed method’s robustness against adversarial attacks that exploit inherent blind spots of neural networks to evade detection while achieving their intended physical effect. Our results show that the proposed method is robust to such evasion attacks: in order to evade detection, the attacker is forced to sacrifice the desired physical impact on the system.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The text we found for this paper looks like another document, so the self-check wasn’t run.
Cites
On Information and Sufficiency
Kullback, S., & Leibler, R. A. (1951) · The Annals of Mathematical Statistics · doi:10.1214/aoms/1177729694 · Cited by 20,193 · see citing works
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143 · see citing works
Chapelle, O., Schölkopf, B., & Zien, A. (2006) · The MIT Press eBooks · doi:10.7551/mitpress/9780262033589.001.0001 · Cited by 4,560 · see citing works
Wild patterns: Ten years after the rise of adversarial machine learning
Biggio, B., & Roli, F. (2018) · Pattern Recognition · doi:10.1016/j.patcog.2018.07.023 · Cited by 1,563 · see citing works
Investigating Ad Transparency Mechanisms in Social Media: A Case Study of Facebook's Explanations
Andreou, A., Venkatadri, G., Goga, O., Gummadi, K. P., Loiseau, P., & Mislove, A. E. (2018) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2018.23191 · Cited by 1,505 · see citing works
Disturbance detection and isolation by dynamic principal component analysis
Ku, W., Storer, R. H., & Georgakis, C. (1995) · Chemometrics and Intelligent Laboratory Systems · doi:10.1016/0169-7439(95)00076-3 · Cited by 1,484 · see citing works
Anomaly Detection Using Autoencoders with Nonlinear Dimensionality Reduction
Sakurada, M., & Yairi, T. (2014) · Proceedings of the MLSDA 2014 2nd Workshop on Machine Learning for Sensory Data Analysis · doi:10.1145/2689746.2689747 · Cited by 1,438 · see citing works
MAD-GAN: Multivariate Anomaly Detection for Time Series Data with Generative Adversarial Networks
Li, D., Chen, D., Jin, B., Shi, L., Goh, J., & Ng, S.-K. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-30490-4_56 · Cited by 1,323 · see citing works
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
A survey of intrusion detection techniques for cyber-physical systems
Mitchell, R., & Chen, I.-R. (2014) · ACM Computing Surveys · doi:10.1145/2542049 · Cited by 768 · see citing works
Kushner, D. (2013) · IEEE Spectrum · doi:10.1109/mspec.2013.6471059 · Cited by 638 · see citing works
Ahmed, C. M., Palleti, V. R., & Mathur, A. P. (2017) · International Workshop on Cyber-Physical Systems for Smart Water Networks (CySWater) · doi:10.1145/3055366.3055375 · Cited by 574 · see citing works
Genetic algorithms and Machine Learning
(1988) · Machine Learning · doi:10.1007/bf00113892 · Cited by 542 · see citing works
A survey of physics-based attack detection in cyber-physical systems
Giraldo, J., Urbina, D., Cardenas, A., Valente, J., Faisal, M., Ruths, J., Tippenhauer, N. O., Sandberg, H., & Candell, R. (2019) · ACM Computing Surveys · doi:10.1145/3203245 · Cited by 535 · see citing works
Mo, Y., Weerakkody, S., & Sinopoli, B. (2015) · IEEE Control Systems · doi:10.1109/mcs.2014.2364724 · Cited by 508 · see citing works
Attack models and scenarios for networked control systems
Teixeira, A. M. H., Perez, D. V., Sandberg, H., & Johansson, K. H. (2012) · International Conference on High Confidence Networked Systems · doi:10.1145/2185505.2185515 · Cited by 492 · see citing works
Anomaly Detection in Cyber Physical Systems Using Recurrent Neural Networks
Goh, J., Adepu, S., Tan, M., & Lee, Z. S. (2017) · IEEE International Symposium on High Assurance Systems Engineering (HASE) · doi:10.1109/hase.2017.36 · Cited by 447 · see citing works
Detecting Cyber Attacks in Industrial Control Systems Using Convolutional Neural Networks
Kravchik, M., & Shabtai, A. (2018) · Workshop on Cyber-Physical Systems Security and PrivaCy (CPS-SPC) · doi:10.1145/3264888.3264896 · Cited by 393 · see citing works
Self-citationAnomaly Detection for a Water Treatment System Using Unsupervised Machine Learning
Inoue, J., Yamagata, Y., Chen, Y., POSKITT, C. M., & Sun, J. (2017) · IEEE ... International Conference on Data Mining workshops · doi:10.1109/icdmw.2017.149 · Cited by 372 · see citing works
Machine learning for power system disturbance and cyber-attack discrimination
Hink, R. B., Beaver, J. M., Buckner, M. A., Morris, T., Adhikari, U., & Pan, S. (2014) · International Symposium on Resilient Control Systems (ISRCS) · doi:10.1109/isrcs.2014.6900095 · Cited by 325 · see citing works
Adversarial Machine Learning Attacks and Defense Methods in the Cyber Security Domain
Rosenberg, I., Shabtai, A., Elovici, Y., & Rokach, L. (2022) · ACM Computing Surveys · doi:10.1145/3453158 · Cited by 295 · see citing works
Self-citationKitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection
Mirsky, Y., Doitshman, T., Elovici, Y., & Shabtai, A. (2018) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2018.23204 · Cited by 292 · see citing works
Self-citationSecurity and privacy in cyber-physical systems: A survey of surveys
Giraldo, J., Sarkar, E., Cardenas, A. A., Maniatakos, M., & Kantarcioglu, M. (2017) · IEEE Design & Test · doi:10.1109/mdat.2017.2709310 · Cited by 289 · see citing works
Cyber-physical attacks in power networks: Models, fundamental limitations and monitor design
Pasqualetti, F., Dörfler, F., & Bullo, F. (2011) · doi:10.1109/cdc.2011.6160641 · Cited by 282 · see citing works
Battle of the Attack Detection Algorithms: Disclosing Cyber Attacks on Water Distribution Networks
Taormina, R., Galelli, S., Tippenhauer, N. O., Salomons, E., Ostfeld, A., Eliades, D. G., Aghashahi, M., Sundararajan, R., Pourahmadi, M., Banks, M. K., et al. (2018) · Journal of Water Resources Planning and Management · doi:10.1061/(asce)wr.1943-5452.0000969 · Cited by 277 · cited 3× · see citing works
“Figure 7 shows that the status of the valve was not replayed, although the authors of [37] reported that it was.”
BackgroundMethodInfluentialMitchell, R., & Chen, I.-R. (2014) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2014.2312327 · Cited by 241 · see citing works
Intrusion Detection in Cyber-Physical Systems: Techniques and Challenges
Han, S., Xie, M., Chen, H., & Ling, Y. (2014) · IEEE Systems Journal · doi:10.1109/jsyst.2013.2257594 · Cited by 203 · see citing works
An Evaluation of Machine Learning Methods to Detect Malicious SCADA Communications
Beaver, J. M., Hink, R. B., & Buckner, M. A. (2013) · International Conference on Machine Learning and Applications · doi:10.1109/icmla.2013.105 · Cited by 197 · see citing works
Hadžiosmanović, D., Sommer, R., Zambon, E., & Hartel, P. (2014) · Annual Computer Security Applications Conference · doi:10.1145/2664243.2664277 · Cited by 190 · see citing works
Ramu, A., & Haldorai, A. (2018) · Lecture notes in computational vision and biomechanics · doi:10.1007/978-3-319-71767-8_9 · Cited by 190 · see citing works
Handbook of Methods of Applied Statistics
Brillinger, D. R., Chakravarti, I. M., Laha, R. G., & Roy, J. (1968) · Revue de l Institut International de Statistique / Review of the International Statistical Institute · doi:10.2307/1401615 · Cited by 177 · see citing works
Characterizing Cyber-Physical Attacks on Water Distribution Systems
Taormina, R., Galelli, S., Tippenhauer, N. O., Salomons, E., & Ostfeld, A. (2017) · Journal of Water Resources Planning and Management · doi:10.1061/(asce)wr.1943-5452.0000749 · Cited by 175 · see citing works
Lin, Q., Adepu, S., Verwer, S., & Mathur, A. P. (2018) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3196494.3196546 · Cited by 157 · see citing works
Comparative study of different wavelet based neural network models for rainfall–runoff modeling
Shoaib, M., Shamseldin, A. Y., & Melville, B. W. (2014) · Journal of Hydrology · doi:10.1016/j.jhydrol.2014.04.055 · Cited by 153 · see citing works
Multi-Agent Approach for Enhancing Security of Protection Schemes in Cyber-Physical Energy Systems
Rahman, M. S., Mahmud, M. A., Oo, A. M. T., & Pota, H. R. (2016) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2016.2612645 · Cited by 153 · see citing works
Secure State Estimation Against Sensor Attacks in the Presence of Noise
Mishra, S., Shoukry, Y., Karamchandani, N., Diggavi, S. N., & Tabuada, P. (2016) · IEEE Transactions on Control of Network Systems · doi:10.1109/tcns.2016.2606880 · Cited by 146 · see citing works
Evaluating Electricity Theft Detectors in Smart Grid Networks
Mashima, D., & Cárdenas, Á. A. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-33338-5_11 · Cited by 136 · see citing works
Taormina, R., & Galelli, S. (2018) · Journal of Water Resources Planning and Management · doi:10.1061/(asce)wr.1943-5452.0000983 · Cited by 133 · see citing works
Uncertainty principles in Fourier analysis
Bruijn, D. N. D. (1967) · TU/e Research Portal · Cited by 114 · see citing works
Anomaly detection in cyber-physical systems: A formal methods approach
Jones, A. M., Kong, Z., & Belta, C. A. (2014) · Proceedings of the IEEE Conference on Decision & Control, including the Symposium on Adaptive Processes · doi:10.1109/cdc.2014.7039487 · Cited by 111 · see citing works
Aoudi, W., Iturbe, M., & Almgren, M. (2018) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3243734.3243781 · Cited by 110 · see citing works
Ahmed, C. M., Zhou, J., & Mathur, A. P. (2018) · Annual Computer Security Applications Conference · doi:10.1145/3274694.3274748 · Cited by 104 · see citing works
A Review of Some Non-parametric Methods of Density Estimation
Fryer, M. J. (1977) · IMA Journal of Applied Mathematics · doi:10.1093/imamat/20.3.335 · Cited by 103 · see citing works
Model-based approach for cyber-physical attack detection in water distribution systems
Housh, M., & Ohar, Z. (2018) · Water Research · doi:10.1016/j.watres.2018.03.039 · Cited by 91 · see citing works
Characterization of a CUSUM model-based sensor attack detector
Murguia, C., & Ruths, J. (2016) · Proceedings of the IEEE Conference on Decision & Control, including the Symposium on Adaptive Processes · doi:10.1109/cdc.2016.7798446 · Cited by 75 · see citing works
Zeinolabedini, M., & Najafzadeh, M. (2019) · Environmental Monitoring and Assessment · doi:10.1007/s10661-019-7196-7 · Cited by 70 · see citing works
Adversarial Regression for Detecting Attacks in Cyber-Physical Systems
Ghafouri, A., Vorobeychik, Y., & Koutsoukos, X. (2018) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2018/524 · Cited by 48 · see citing works
Abokifa, A. A., Haddad, K., Lo, C. S., & Biswas, P. (2017) · World Environmental and Water Resources Congress 2017 · doi:10.1061/9780784480625.063 · Cited by 42 · see citing works
Stealthy Deception Attacks Against SCADA Systems
Kleinmann, A., Amichay, O., Wool, A., Tenenbaum, D., Bar, O., & Lev, L. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-72817-9_7 · Cited by 40 · see citing works
Context-Awareness Using Anomaly-Based Detectors for Smart Grid Domains
Alcaraz, C., Cazorla, L., & Fernández, G. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-17127-2_2 · Cited by 39 · see citing works
A Deep Learning-based Framework for Conducting Stealthy Attacks in Industrial Control SystemsPreprint
Feng, C., Li, T., Zhu, Z., & Chana, D. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1709.06397 · Cited by 35 · see citing works
Mishra, V. K., Palleti, V. R., & Mathur, A. P. (2019) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2019.05.001 · Cited by 29 · see citing works
Sehatbakhsh, N., Nazari, A., Khan, H. A., Zajic, A. G., & Prvulović, M. (2019) · IEEE/ACM International Symposium on Microarchitecture (MICRO) · doi:10.1145/3352460.3358261 · Cited by 24 · see citing works
Chandy, S. E., Rasekh, A., Barker, Z. A., Campbell, B., & Shafiee, M. E. (2017) · World Environmental and Water Resources Congress 2017 · doi:10.1061/9780784480625.057 · Cited by 23 · see citing works
Erba, A., Taormina, R., Galelli, S., Pogliani, M., Carminati, M., Zanero, S., & Tippenhauer, N. O. (2019) · arXiv (Cornell University) · Cited by 14 · see citing works
Physical Attestation in the Smart Grid for Distributed State Verification
Roth, T. P., & McMillin, B. (2016) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2016.2577021 · Cited by 13 · see citing works
Herzberg, A., & Kfir, Y. (2019) · doi:10.1145/3338499.3357358 · Cited by 10 · see citing works
Adversarial Learning in the Cyber Security DomainPreprint
Rosenberg, I., Shabtai, A., Elovici, Y., & Rokach, L. (2020) · arXiv (Cornell University) · Cited by 10 · see citing works
Self-citation
Flagged first, then by citations
Cited by
Sorted by citations
Deep Learning Based Attack Detection for Cyber-Physical System Cybersecurity: A Survey
Zhang, J., Pan, L., Han, Q., Chen, C., Wen, S., & Xiang, Y. (2021) · IEEE/CAA Journal of Automatica Sinica · doi:10.1109/jas.2021.1004261 · Cited by 445 · see citing works
A Survey on Industrial Control System Testbeds and Datasets for Security Research
Conti, M., Donadel, D., & Turrin, F. (2021) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2021.3094360 · Cited by 284 · see citing works
Hương, T. T., Bac, T. P., Long, D. M., Luong, T. D., Dan, N. M., Quang, L. A., Cong, L. T., Thang, B. D., & Tran, K. P. (2021) · Computers in Industry · doi:10.1016/j.compind.2021.103509 · Cited by 196 · see citing works
A survey on deep learning for cybersecurity: Progress, challenges, and opportunities
Macas, M., Wu, C., & Fuertes, W. (2022) · Computer Networks · doi:10.1016/j.comnet.2022.109032 · Cited by 192 · see citing works
A Comprehensive Survey of Machine Learning Methodologies with Emphasis in Water Resources Management
Drogkoula, M., Kokkinos, K., & Samaras, N. (2023) · Applied Sciences · doi:10.3390/app132212147 · Cited by 122 · see citing works
Hương, T. T., Bac, T. P., Le, Q. A., Nguyen, D. M., Le, C. T., Nguyen, H. X., Thu, H., Nguyen, H. T., & Tran, K. P. (2022) · Computers in Industry · doi:10.1016/j.compind.2022.103692 · Cited by 143 · see citing works
Macas, M., Wu, C., & Fuertes, W. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.122223 · Cited by 160 · see citing works
Koay, A. M. Y., Ko, R. K. L., Hettema, H., & Radke, K. (2023) · Journal of Intelligent Information Systems · doi:10.1007/s10844-022-00753-1 · Cited by 131 · see citing works
Joint Adversarial Example and False Data Injection Attacks for State Estimation in Power Systems
Tian, J., Wang, B., Wang, Z., Cao, K., Li, J., & Ozay, M. (2021) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2021.3125345 · Cited by 117 · see citing works
Nedeljkovic, D. M., & Jakovljević, Ž. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102585 · Cited by 113 · see citing works
Wang, F., Jiang, Y., Zhang, R., Wei, A., Xie, J., & Pang, X. (2025) · Sensors · doi:10.3390/s25010190 · Cited by 119 · see citing works
Sarker, I. H. (2023) · Security and Privacy · doi:10.1002/spy2.295 · Cited by 101 · see citing works
IADF-CPS: Intelligent Anomaly Detection Framework towards Cyber Physical Systems
Nagarajan, S. M., Devarajan, G. G., Bashir, A. K., Mahapatra, R. P., & Al-Numay, M. S. (2022) · Computer Communications · doi:10.1016/j.comcom.2022.02.022 · Cited by 88 · see citing works
A feature selection based on genetic algorithm for intrusion detection of industrial control systems
Fang, Y., Yao, Y. K., Lin, X., Wang, J., & Zhai, H. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103675 · Cited by 86 · see citing works
Raman, M. R. G., Ahmed, C. M., & Mathur, A. P. (2021) · Cybersecurity · doi:10.1186/s42400-021-00095-5 · Cited by 80 · see citing works
Efficient intrusion detection toward IoT networks using cloud–edge collaboration
Yang, R., He, H. X., Xu, Y., Xin, B., Wang, Y., Qu, Y., & Zhang, W. (2023) · Computer Networks · doi:10.1016/j.comnet.2023.109724 · Cited by 79 · see citing works
DAICS: A Deep Learning Solution for Anomaly Detection in Industrial Control Systems
Abdelaty, M. F., Doriguzzi-Corin, R., & Siracusa, D. (2021) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2021.3073017 · Cited by 65 · see citing works
Chronos: DDoS Attack Detection Using Time-Based Autoencoder
Salahuddin, M. A., Pourahmadi, V., Alameddine, H. A., Bari, M. F., & Boutaba, R. (2021) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2021.3088326 · Cited by 63 · see citing works
An ensemble deep federated learning cyber-threat hunting model for Industrial Internet of Things
Jahromi, A. N., Karimipour, H., & Dehghantanha, A. (2022) · Computer Communications · doi:10.1016/j.comcom.2022.11.009 · Cited by 63 · see citing works
Huang, J., Zeng, G., Geng, G., Weng, J., Lu, K., & Zhang, Y. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103310 · Cited by 62 · see citing works
Zhong, Y., Wang, Z., Shi, X., Yang, J., & Li, K. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3402439 · Cited by 60 · see citing works
Fährmann, D., Damer, N., Kirchbuchner, F., & Kuijper, A. (2022) · Sensors · doi:10.3390/s22082886 · Cited by 59 · see citing works
Yao, C., Yu, Y., Yin, K., & Yang, J. (2022) · IEEE Access · doi:10.1109/access.2022.3210189 · Cited by 57 · see citing works
Industrial cyber-physical systems protection: A methodological review
Canonico, R., & Sperlí, G. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103531 · Cited by 62 · see citing works
An explainable multi-modal model for advanced cyber-attack detection in industrial control systems
Bahadoripour, S., Karimipour, H., Jahromi, A. N., & Islam, A. (2024) · Internet of Things · doi:10.1016/j.iot.2024.101092 · Cited by 59 · see citing works
Practical Cyber Attack Detection With Continuous Temporal Graph in Dynamic Network System
Duan, G., Lv, H., Wang, H., Feng, G., & Li, X. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3385321 · Cited by 51 · see citing works
Li, Z., Duan, M., Xiao, B., & Yang, S. (2023) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3231923 · Cited by 45 · see citing works
Systematic Literature Review: Anomaly Detection in Connected and Autonomous Vehicles
Solaas, J. R. V., Mariconti, E., & Tuptuk, N. (2024) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2024.3495031 · Cited by 44 · see citing works
Adiban, M., Siniscalchi, S. M., & Salvi, G. (2023) · Neurocomputing · doi:10.1016/j.neucom.2023.03.056 · Cited by 42 · see citing works
Yu, Z., Wang, H., Wang, D., Li, Z., & Song, H. H. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3183952 · Cited by 37 · see citing works
Adversarial Machine Learning in Industry: A Systematic Literature Review
Jedrzejewski, F. V., Thode, L., Fischbach, J., Gorschek, T., Méndez, D., & Lavesson, N. (2024) · Computers & Security · doi:10.1016/j.cose.2024.103988 · Cited by 44 · see citing works
ICS anomaly detection based on sensor patterns and actuator rules in spatiotemporal dependency
Cai, J., Wei, Z., & Luo, J. (2024) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2024.3393528 · Cited by 38 · see citing works
Shao, J., Zeng, G., Lu, K., Geng, G., & Weng, J. (2024) · Computers & Security · doi:10.1016/j.cose.2024.103910 · Cited by 33 · see citing works
Xue, L., & Zhu, T. (2023) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2023.107568 · Cited by 33 · see citing works
Encrypted malicious traffic detection based on natural language processing and deep learning
Zang, X., Wang, T., Zhang, X., Gong, J., Gao, P., & Zhang, G. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110598 · Cited by 32 · see citing works
Leveraging AI for Network Threat Detection—A Conceptual Overview
Paracha, M. A., Jamil, S. U., Shahzad, K., Khan, M. A., & Rasheed, A. (2024) · Electronics · doi:10.3390/electronics13234611 · Cited by 42 · see citing works
COVID-19: impact on quality of work life in real estate sector
Majumder, S., & Biswas, D. (2021) · Quality & Quantity · doi:10.1007/s11135-021-01136-4 · Cited by 31 · see citing works
A real-time network based anomaly detection in industrial control systems
Zare, F., Mahmoudi-Nasr, P., & Yousefpour, R. (2024) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2024.100676 · Cited by 29 · see citing works
Fung, C., Srinarasi, S., Lucas, K., Phee, H. B., & Bauer, L. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17143-7_24 · Cited by 28 · see citing works
An improved autoencoder-based approach for anomaly detection in industrial control systems
Aslam, M. M., Tufail, A., Silva, L. C. D., Apong, R. A. A. H. M., & Namoun, A. (2024) · Systems Science & Control Engineering · doi:10.1080/21642583.2024.2334303 · Cited by 28 · see citing works
Nakhodchi, S., Zolfaghari, B., Yazdinejad, A., & Dehghantanha, A. (2021) · Conference on Privacy, Security and Trust · doi:10.1109/pst52912.2021.9647777 · Cited by 27 · see citing works
Lan, J., Liu, X., Li, B., & Zhao, J. (2022) · Applied Intelligence · doi:10.1007/s10489-022-04076-0 · Cited by 26 · see citing works
Gulzar, Q., & Mustafa, K. (2025) · Scientific Reports · doi:10.1038/s41598-025-89650-5 · Cited by 29 · see citing works
Intrusion Detection System Based on In-Depth Understandings of Industrial Control Logic
Sun, M., Lai, Y., Wang, Y., Liu, J., Mao, B., & Gu, H. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3200363 · Cited by 24 · see citing works
Evasion Attacks and Defenses on Smart Home Physical Event Verification
Ozmen, M. O., Song, R., Farrukh, H., & Celik, Z. B. (2023) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2023.23070 · Cited by 24 · see citing works
Chen, L., Zhu, Q., & He, Y. (2023) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2023.3291717 · Cited by 23 · see citing works
Pozdnyakov, V., Kovalenko, A., Makarov, I., Drobyshevskiy, M., & Lukyanov, K. S. (2024) · IEEE Open Journal of the Industrial Electronics Society · doi:10.1109/ojies.2024.3401396 · Cited by 26 · see citing works
Evasive attacks against autoencoder-based cyberattack detection systems in power systems
Khaw, Y. M., Jahromi, A. A., Arani, M. F. M., & Kundur, D. (2024) · Energy and AI · doi:10.1016/j.egyai.2024.100381 · Cited by 22 · see citing works
ALGAN: Time Series Anomaly Detection with Adjusted-LSTM GAN
Bashar, M. A., & Nayak, R. (2025) · International Journal of Data Science and Analytics · doi:10.1007/s41060-025-00810-2 · Cited by 34 · see citing works
Sharmeen, S., Huda, S., Abawajy, J., Ahmed, C. M., Hassan, M. M., & Fortino, G. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3100461 · Cited by 21 · see citing works
Rawat, H., Rawat, A., Rajavat, A., & Rawat, R. (2025) · doi:10.1002/9781394305810.ch32 · Cited by 21 · see citing works
Erba, A., & Tippenhauer, N. O. (2022) · Annual Computer Security Applications Conference · doi:10.1145/3564625.3564633 · Cited by 20 · see citing works
Attributions for ML-based ICS Anomaly Detection: From Theory to Practice
Fung, C., Zeng, E., & Bauer, L. (2024) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2024.23216 · Cited by 19 · see citing works
Yu, Y., Zhang, Z., Huang, J., Li, Y., Qin, R., Wen, G., Cheng, W., & Chen, X. (2024) · NDT & E International · doi:10.1016/j.ndteint.2024.103232 · Cited by 19 · see citing works
Are the processing facilities safe and secured against cyber threats?
Arunthavanathan, R., Khan, F. I., Sajid, Z., Amin, M. T., Kota, K. R., & Kumar, S. (2025) · Reliability Engineering & System Safety · doi:10.1016/j.ress.2025.111011 · Cited by 18 · see citing works
Practical Evaluation of Poisoning Attacks on Online Anomaly Detectors in Industrial Control Systems
Kravchik, M., Demetrio, L., Biggio, B., & Shabtai, A. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102901 · Cited by 18 · see citing works
Self-citationCan Industrial Intrusion Detection Be SIMPLE?
Wolsing, K., Thiemt, L., van Sloun, C., Wagner, E., Wehrle, K., & Henze, M. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17143-7_28 · Cited by 18 · see citing works
Xu, L., Ding, X., Zhao, D., Liu, A. X., & Zhang, Z. (2023) · Entropy · doi:10.3390/e25020180 · Cited by 18 · see citing works
A Deep Multi-Modal Cyber-Attack Detection in Industrial Control Systems
Bahadoripour, S., MacDonald, M. E., & Karimipour, H. (2023) · IEEE International Conference on Industrial Technology (ICIT) · doi:10.1109/icit58465.2023.10143147 · Cited by 18 · see citing works
Aslam, M. M., Silva, L. C. D., Apong, R. A. A. H. M., & Tufail, A. (2025) · Scientific Reports · doi:10.1038/s41598-025-12775-0 · Cited by 17 · see citing works
Information Fingerprint for Secure Industrial Big Data Analytics
Jiang, X., & Ge, Z. (2021) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2021.3104056 · Cited by 18 · see citing works
Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks
Jiang, X., & Ge, Z. (2022) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2022.3145335 · Cited by 17 · see citing works
A Data-Driven Framework for Verified Detection of Replay Attacks on Industrial Control Systems
Gargoum, S., Yassaie, N., Al-Dabbagh, A. W., & Feng, C. (2024) · IEEE Transactions on Automation Science and Engineering · doi:10.1109/tase.2024.3394315 · Cited by 16 · see citing works
Supervised Learning of Neural Networks for Active Queue Management in the Internet
Szyguła, J., Domański, A., Domańska, J., Marek, D., Filus, K., & Mendla, S. (2021) · Sensors · doi:10.3390/s21154979 · Cited by 16 · see citing works
Deep learning techniques to detect cybersecurity attacks: a systematic mapping study
Torre, D., Mesadieu, F., & Chennamaneni, A. (2023) · Empirical Software Engineering · doi:10.1007/s10664-023-10302-1 · Cited by 16 · see citing works
A Lightweight Unsupervised Intrusion Detection Model Based on Variational Auto-Encoder
Ren, Y., Feng, K., Hu, F., Chen, L., & Chen, Y. (2023) · Sensors · doi:10.3390/s23208407 · Cited by 15 · see citing works
HyperEye: A Lightweight Features Fusion Model for Unknown Encrypted Malware Traffic Detection
Zang, X., Zheng, Z., Zheng, H., Liu, X., Khan, M. K., & Jiang, W. (2025) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2025.3558353 · Cited by 15 · see citing works
Using Kolmogorov–Arnold network for cyber-physical system security: A fast and efficient approach
Ghorbani, M., Ghassemi, A., Alikhani, M., Khaloozadeh, H., & Nikoofard, A. (2025) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2025.100768 · Cited by 14 · see citing works
Survey of deep learning approaches for securing industrial control systems: A comparative analysis
Aslam, M. M., Tufail, A., & Irshad, M. N. (2025) · Cyber Security and Applications · doi:10.1016/j.csa.2025.100096 · Cited by 14 · see citing works
A Novel CNN-LSTM Fusion-Based Intrusion Detection Method for Industrial Internet
Song, J., Zhang, Z., Zhao, K., Xue, Q., & Gupta, B. B. (2023) · International Journal of Information Security and Privacy · doi:10.4018/ijisp.325232 · Cited by 14 · see citing works
Spatial Data Transformation and Vision Learning for Elevating Intrusion Detection in IoT Networks
Nguyen, V.-L., Tsai, H.-P., Shin, H., & Duong, T. Q. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3459015 · Cited by 14 · see citing works
Anomaly Detection in Cyber-Physical Systems: Reconstruction of a Prediction Error Feature Space
Oliveira, N. R. B. D., Sousa, N., Oliveira, J., & Praça, I. (2021) · International Conference on Security of Information and Networks (SIN) · doi:10.1109/sin54109.2021.9699339 · Cited by 14 · see citing works
Anomaly Detection in Industrial Control Systems Based on Cross-Domain Representation Learning
Zhan, D., Zhang, W., Ye, L., Yu, X., Zhang, H., & He, Z. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3520155 · Cited by 13 · see citing works
AI for Cyberbiosecurity in Water Systems—A Survey
Sobien, D., Yardimci, M. O., Nguyen, M. B. T., Mao, W.-Y., Fordham, V., Rahman, A., Duncan, S. E., & Batarseh, F. A. (2023) · Springer eBooks · doi:10.1007/978-3-031-26034-6_13 · Cited by 13 · see citing works
Using machine learning to detect network intrusions in industrial control systems: a survey
Termanini, A., Al‐Abri, D., Bourdoucen, H., & Maashri, A. A. (2024) · International Journal of Information Security · doi:10.1007/s10207-024-00916-x · Cited by 12 · see citing works
A Hybrid CNN-LSTM Framework for Unsupervised Anomaly Detection in Water Distribution Plant
Şahin, A. K., Çavdar, B., Doğan, R. Ö., Ayas, S., Özgenç, B., & Ayas, M. Ş. (2023) · Innovations in Intelligent Systems and Applications Conference (ASYU) · doi:10.1109/asyu58738.2023.10296546 · Cited by 12 · see citing works
Liu, Y., Deng, W., Liu, Z., & Zeng, F. (2024) · The Journal of Supercomputing · doi:10.1007/s11227-024-06018-8 · Cited by 12 · see citing works
Mismatched Control and Monitoring Frequencies: Vulnerability, Attack, and Mitigation
Yang, Z., He, L., Cheng, P., & Chen, J. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3384146 · Cited by 12 · see citing works
An approach for assessing the functional vulnerabilities criticality of CPS components
Alguliyev, R. M., Aliguliyev, R. M., & Sukhostat, L. V. (2024) · Cyber Security and Applications · doi:10.1016/j.csa.2024.100058 · Cited by 12 · see citing works
Unveiling Physical Semantics of PLC Variables Using Control Invariants
Yang, Z., He, L., Ruan, Y., Cheng, P., & Chen, J. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3434622 · Cited by 12 · see citing works
Seo, J. K., Lee, J., Kim, B., Shim, W., & Seo, J. T. (2025) · Electronics · doi:10.3390/electronics15010020 · Cited by 15 · see citing works
Anomaly detection in cyber-physical systems using actuator state transition model
Pandey, R. K., & Das, T. K. (2024) · International Journal of Information Technology · doi:10.1007/s41870-024-02128-x · Cited by 11 · see citing works
Empowered Cyber–Physical Systems security using both network and physical data
Canonico, R., Esposito, G., Navarro, A., Romano, S. P., Sperlí, G., & Vignali, A. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104382 · Cited by 11 · see citing works
Zeng, G., Shao, J., Lu, K., Geng, G., & Weng, J. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3586479 · Cited by 12 · see citing works
A Causality-Inspired Approach for Anomaly Detection in a Water Treatment Testbed
Koutroulis, G., Mutlu, B., & Kern, R. (2022) · Sensors · doi:10.3390/s23010257 · Cited by 12 · see citing works
Huang, M., Li, W., He, J., Lan, X., Li, T., & Zhang, N. (2024) · International Journal of Computational Intelligence Systems · doi:10.1007/s44196-024-00498-5 · Cited by 10 · see citing works
Resilience Framework for Power Electronic Systems Against Cyber-Physical Attacks: A Review
Liu, C., Ye, J., Fang, G., Wang, D., Zhou, L., & Emadi, A. (2024) · IEEE Open Journal of Power Electronics · doi:10.1109/ojpel.2024.3512452 · Cited by 10 · see citing works
An anomaly-based approach for cyber–physical threat detection using network and sensor data
Canonico, R., Esposito, G., Navarro, A., Romano, S. P., Sperlí, G., & Vignali, A. (2025) · Computer Communications · doi:10.1016/j.comcom.2025.108087 · Cited by 10 · see citing works
(2025) · doi:10.1016/j.iot.2026.101938 · Cited by 31 · see citing works
Designing an Intrusion Detection for an Adjustable Speed Drive System Controlling a Critical Process
Alotaibi, F. H., Ibrahim, H., Kim, J., Kumar, P. R., & Enjeti, P. N. (2023) · IEEE Access · doi:10.1109/access.2023.3297145 · Cited by 9 · see citing works
Learning-based actuator selection for increased attack resilience of uncertain systems
Fotiadis, F., & Vamvoudakis, K. G. (2023) · Automatica · doi:10.1016/j.automatica.2023.111332 · Cited by 9 · see citing works
Wang, Z., Zhang, L., Qiu, Q., & Kong, F. (2023) · IEEE Real-Time Systems Symposium (RTSS) · doi:10.1109/rtss59052.2023.00016 · Cited by 9 · see citing works
An Attention-Based Deep Generative Model for Anomaly Detection in Industrial Control Systems
Macas, M., Wu, C., & Fuertes, W. (2023) · International Conference on Web Information Systems and Technologies · doi:10.5220/0012264000003584 · Cited by 8 · see citing works
Al‐Hadithi, B. M., & Gómez, J. (2025) · Processes · doi:10.3390/pr13010217 · Cited by 8 · see citing works
NGMO: A Novel Geometric Mean Optimizer for Intrusion Detection in Industrial Cyber-Physical Systems
Yao, Y., Zhang, Z., Zhao, K., Wang, P., & Wu, R. (2025) · IEEE Transactions on Industrial Cyber-Physical Systems · doi:10.1109/ticps.2025.3556034 · Cited by 8 · see citing works
Alshaya, R., & Khediri, S. E. (2025) · Peer-to-Peer Networking and Applications · doi:10.1007/s12083-025-01933-w · Cited by 8 · see citing works
Karanwal, S. (2023) · Multimedia Tools and Applications · doi:10.1007/s11042-023-16635-9 · Cited by 8 · see citing works
MSGAN: multi-stage generative adversarial network-based data recovery in cyber-attacks
Tian, B., Lai, Y., Sun, M., Wang, Y., & Liu, J. (2023) · Neural Computing and Applications · doi:10.1007/s00521-023-08791-8 · Cited by 7 · see citing works
Jeon, S., Koo, K., Moon, D., & Seo, J. T. (2024) · Applied Sciences · doi:10.3390/app14177714 · Cited by 7 · see citing works
Gómez, Á. L. P., Maimó, L. F., Celdrán, A. H., & Clemente, F. J. G. (2024) · IEEE Access · doi:10.1109/access.2024.3524996 · Cited by 7 · see citing works
- Authors
- Kravchik, M., & Shabtai, A.
- Affiliations
- Ben-Gurion University of the Negev (IL)
- Venue
- IEEE Transactions on Dependable and Secure Computing
- Published
- 2022-07-01
- Volume
- 19
- Issue
- 4
- Pages
- 2179-2197
- ISSN
- 1545-5971 (ISSN-L)
- 1941-0018
- 2160-9209
- OpenAlex
- W3119781401
- Cited by
- 224
- References
- 56
- Citations by year
- 2026: 21 · 2025: 55 · 2024: 57 · 2023: 42 · 2022: 25 · 2021: 24
- FWCI
- 16.46
- Type
- journal article
- Language
- en
- Open access
- green
- zenodo.org
- Licence
- Locations
- IEEE Transactions on Dependable and Secure Computing (publishedVersion)
- Zenodo (CERN European Organization for Nuclear Research) (submittedVersion, cc-by)
- Funders
- H2020 European Institute of Innovation and Technology (830927)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Keywords
- cyberattack detection, industrial control systems, lightweight neural networks, 1D convolutional neural network, autoencoder, principal component analysis, adversarial attacks, evasion attacks, physical assault, detection robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
