The DOI matches its Crossref record, with a small difference in title or year; 59 of the 59 references it cites were found in a registry or an index.
${l_p}$-norms in One-Class Classification for Intrusion Detection in SCADA Systems
Abstract
The massive use of information and communication technologies in supervisory control and data acquisition (SCADA) systems opens new ways for carrying out cyberattacks against critical infrastructures relying on SCADA networks. The various vulnerabilities in these systems and the heterogeneity of cyberattacks make the task extremely difficult for traditional intrusion detection systems (IDS). Modeling cyberattacks has become nearly impossible and their potential consequences may be very severe. The primary objective of this work is to detect malicious intrusions once they have already bypassed traditional IDS and firewalls. This paper investigates the use of machine learning for intrusion detection in SCADA systems using one-class classification algorithms. Two approaches of one-class classification are investigated: 1) the support vector data description (SVDD); and 2) the kernel principle component analysis. The impact of the considered metric is examined in detail with the study of lp-norms in radial basis function (RBF) kernels. A heuristic is proposed to find an optimal choice of the bandwidth parameter in these kernels. Tests are conducted on real data with several types of cyberattacks.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Citations
Cites
Neural Networks: A Comprehensive Foundation
Haykin, S. (1998) · Cited by 30,070
UCI Machine Learning Repository
Asuncion, A. (2007) · Medical Entomology and Zoology · Cited by 24,190
Normalized cuts and image segmentation
Shi, J., & Malik, J. (2000) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/34.868688 · Cited by 15,935
Nonlinear Component Analysis as a Kernel Eigenvalue Problem
Schölkopf, B., Smola, A. J., & Müller, K. (1998) · Neural Computation · doi:10.1162/089976698300017467 · Cited by 8,196
Kernel Methods for Pattern Analysis
Shawe-Taylor, J. S., & Cristianini, N. (2004) · Cambridge University Press eBooks · doi:10.1017/cbo9780511809682 · Cited by 6,610
Estimating the Support of a High-Dimensional Distribution
Schölkopf, B., Platt, J. C., Shawe-Taylor, J., Smola, A. J., & Williamson, R. C. (2001) · Neural Computation · doi:10.1162/089976601750264965 · Cited by 6,168
Missing Value Estimation Methods for DNA Microarrays
Troyanskaya, O., Cantor, M., Sherlock, G., Brown, P., Hastie, T., Tibshirani, R., Botstein, D., & Altman, R. B. (2001) · Bioinformatics · doi:10.1093/bioinformatics/17.6.520 · Cited by 4,230
Support Vector Data Description
Tax, D. M. J., & Duin, R. P. W. (2003) · Machine Learning · doi:10.1023/b:mach.0000008084.60811.49 · Cited by 3,612
Kernel methods in machine learning
Hofmann, T., Schölkopf, B., & Smola, A. J. (2008) · The Annals of Statistics · doi:10.1214/009053607000000677 · Cited by 2,292
Practical selection of SVM parameters and noise estimation for SVM regression
Cherkassky, V., & Ma, Y. (2003) · Neural Networks · doi:10.1016/s0893-6080(03)00169-2 · Cited by 2,034
Stuxnet: Dissecting a cyberwarfare weapon
Langner, R. (2011) · IEEE Security & Privacy Magazine · doi:10.1109/msp.2011.67 · Cited by 1,922
A Generalized Representer Theorem
Schölkopf, B., Herbrich, R., & Smola, A. J. (2001) · Lecture notes in computer science · doi:10.1007/3-540-44581-1_27 · Cited by 1,647
KERNEL METHODS IN MACHINE LEARNING
Hofmann, T., Schölkopf, B., & Smola, A. J. (2008) · Cited by 1,408
An analysis of four missing data treatment methods for supervised learning
Batista, G., & Monard, M. C. (2003) · Applied Artificial Intelligence · doi:10.1080/713827181 · Cited by 898
Kernel PCA for novelty detection
Hoffmann, H. (2006) · Pattern Recognition · doi:10.1016/j.patcog.2006.07.009 · Cited by 776
Lessons Learned from the Maroochy Water Breach
Slay, J., & Miller, M. (2007) · Critical Infrastructure Protection · doi:10.1007/978-0-387-75462-8_6 · Cited by 721
Attacks against process control systems: risk assessment, detection, and response
Cárdenas, A. A., Amin, S., Lin, Z.-S., Huang, Y.-L., Huang, C.-Y., & Sastry, S. (2011) · Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security · doi:10.1145/1966913.1966959 · Cited by 699
Vulnerability Assessment of Cybersecurity for SCADA Systems
Ten, C.-W., Liu, C.-C., & Manimaran, G. (2008) · IEEE Transactions on Power Systems · doi:10.1109/tpwrs.2008.2002298 · Cited by 583
Chen, T. M., & Abu-Nimeh, S. (2011) · Computer · doi:10.1109/mc.2011.115 · Cited by 398
Vert, J., Tsuda, K., & Schölkopf, B. (2004) · The MIT Press eBooks · doi:10.7551/mitpress/4057.003.0004 · Cited by 386
A Survey of Recent Trends in One Class Classification
Khan, S. S., & Madden, M. G. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-17080-5_21 · Cited by 348
Data domain description using support vectors.
Tax, D. M. J., & Duin, R. P. W. (1999) · Cited by 276
A Multidimensional Critical State Analysis for Detecting Intrusions in SCADA Systems
Carcano, A., Coletta, A., Guglielmi, M., Masera, M., Nai Fovino, I., & Trombetta, A. (2011) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2010.2099234 · Cited by 259
Luengo, J., García, S., & Herrera, F. (2011) · Knowledge and Information Systems · doi:10.1007/s10115-011-0424-2 · Cited by 241
Towards Missing Data Imputation: A Study of Fuzzy K-means Clustering Method
Li, D., Deogun, J. S., Spaulding, W. D., & Shuart, B. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-25929-9_70 · Cited by 220
Synthesizing Statistical Knowledge from Incomplete Mixed-Mode Data
Wong, A. K. C., & Chiu, D. (1987) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.1987.4767986 · Cited by 192
A Meta-Learning Method to Select the Kernel Width in Support Vector Regression
Soares, C., Brazdil, P., & Kuba, P. (2004) · Machine Learning · doi:10.1023/b:mach.0000015879.28004.9b · Cited by 187
Data mining and the impact of missing data
Brown, M. L., & Kros, J. F. (2003) · Industrial Management & Data Systems · doi:10.1108/02635570310497657 · Cited by 181
A control system testbed to validate critical infrastructure protection concepts
Morris, T. H., Srivastava, A. K., Reaves, B., Gao, W., Pavurapu, K., & Reddi, R. M. (2011) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2011.06.005 · Cited by 162
Online Kernel Principal Component Analysis: A Reduced-Order Model
Honeiné, P. (2011) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2011.270 · Cited by 112
Critical State-Based Filtering System for Securing SCADA Network Protocols
Nai Fovino, I., Coletta, A., Carcano, A., & Masera, M. (2012) · IEEE Transactions on Industrial Electronics · doi:10.1109/tie.2011.2181132 · Cited by 108
Luengo, J., García, S., & Herrera, F. (2009) · Neural Networks · doi:10.1016/j.neunet.2009.11.014 · Cited by 101
Safeguarding SCADA Systems with Anomaly Detection
Bigham, J., Gamez, D., & Lü, N. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-45215-7_14 · Cited by 94
An experimental platform for assessing SCADA vulnerabilities and countermeasures in power plants
Fovino, I. N., Masera, M., Guidi, L., & Carpi, G. (2010) · Conference on Human System Interactions · doi:10.1109/hsi.2010.5514494 · Cited by 86
A testbed for SCADA control system cybersecurity research and pedagogy
Morris, T., Vaughn, R., & Dandass, Y. S. (2011) · Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research · doi:10.1145/2179298.2179327 · Cited by 76 · cited 1×
“Morris et al. investigated in [23] and [24] the vulnerabilities of functional control systems.”
BackgroundSome Properties of the Gaussian Kernel for One Class Learning
Evangelista, P. F., Embrechts, M. J., & Szymanski, B. K. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-74690-4_28 · Cited by 72
Mazhelis, O. (2007) · Revue Africaine de la Recherche en Informatique et Mathématiques Appliquées · doi:10.46298/arima.1877 · Cited by 71
Intrusion Detection and Event Monitoring in SCADA Networks
Oman, P., & Phillips, M. (2007) · IFIP International Federation for Information Processing · doi:10.1007/978-0-387-75462-8_12 · Cited by 62
Adaptive Kalman Filtering for anomaly detection in software appliances
Knorn, F., & Leith, D. J. (2008) · IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) · doi:10.1109/infocom.2008.4544581 · Cited by 62
EWMA Forecast of Normal System Activity for Computer Intrusion Detection
Ye, N., Chen, Q., & Borror, C. M. (2004) · IEEE Transactions on Reliability · doi:10.1109/tr.2004.837705 · Cited by 58
Urias, V., Van Leeuwen, B., & Richardson, B. (2012) · MILCOM 2012 - 2012 IEEE Military Communications Conference · doi:10.1109/milcom.2012.6415818 · Cited by 56
Anomaly Intrusion Detection Approach Using Hybrid MLP/CNN Neural Network
Yu, Y., Wei, Y., Gao, F., & Yu, G. (2006) · International Conference on Intelligent Systems Design and Applications (ISDA) · doi:10.1109/isda.2006.253765 · Cited by 54
Handling Missing Attribute Values in Preterm Birth Data Sets
Grzymala‐Busse, J. W., Goodwin, L., Grzymała-Busse, W. J., & Zheng, X. (2005) · Lecture notes in computer science · doi:10.1007/11548706_36 · Cited by 54
Creating a European SCADA Security Testbed
Christiansson, H., & Luiijf, H. A. M. (2007) · Springer eBooks · doi:10.1007/978-0-387-75462-8_17 · Cited by 52
Stouffer, K. A., Falco, J., & Scarfone, K. A. (2011) · doi:10.6028/nist.sp.800.82 · Cited by 50
Secure "selecticast" for collaborative intrusion detection systems
Gross, P. N. (2004) · doi:10.1049/ic:20040382 · Cited by 48
On simple one-class classification methods
Noumir, Z., Honeiné, P., & Richard, C. (2012) · IEEE International Symposium on Information Theory (ISIT) · doi:10.1109/isit.2012.6283685 · Cited by 39
Support-Vector-Based Hyperspectral Anomaly Detection Using Optimized Kernel Parameters
Gurram, P. K., & Kwon, H. (2011) · IEEE Geoscience and Remote Sensing Letters · doi:10.1109/lgrs.2011.2155030 · Cited by 39
Multiclass classification machines with the complexity of a single binary classifier
Honeiné, P., Noumir, Z., & Richard, C. (2012) · Signal Processing · doi:10.1016/j.sigpro.2012.11.009 · Cited by 31
Kernel Whitening for One-Class Classification
Tax, D. M. J., & Juszczak, P. (2002) · Lecture notes in computer science · doi:10.1007/3-540-45665-1_4 · Cited by 29
Mahalanobis-based one-class classification
Nader, P., Honeiné, P., & Beauseroy, P. (2014) · Machine learning for signal processing ... · doi:10.1109/mlsp.2014.6958934 · Cited by 26
Neural Network Ensembles for Intrusion Detection
Golovko, V. A., Kachurka, P., & Vaitsekhovich, L. (2007) · doi:10.1109/idaacs.2007.4488487 · Cited by 16
Intrusion Detection in SCADA Systems Using One-Class Classification
Nader, P., Honeiné, P., & Beauseroy, P. (2013) · HAL · Cited by 15
Online One-Class Machines Based On The Coherence Criterion
Honeiné, P., Noumir, Z., & Richard, C. (2012) · INFM-OAR (INFN Catania) · doi:10.5281/zenodo.52082 · Cited by 12
Ghadiri, A., & Ghadiri, N. (2011) · Annual Communication Networks and Services Research Conference (CNSR) · doi:10.1109/cnsr.2011.26 · Cited by 12
Strategies for principal component analysis in wireless sensor networks
Ghadban, N., Honeiné, P., Francis, C., Mourad-Chehade, F., & Farah, J. (2014) · IEEE Sensor Array and Multichannel Signal Processing Workshop (SAM) · doi:10.1109/sam.2014.6882383 · Cited by 11
Visual Object Recognition Through One-Class Learning
Wang, Q., Lopes, L. S., & Tax, D. M. J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-30125-7_58 · Cited by 10
An anomaly detection architecture based on a data-adaptive density estimation
Veracini, T., Matteoli, S., Diani, M., & Corsini, G. U. (2011) · Workshop on Hyperspectral Image and Signal Processing: Evolution in Remote Sensing · doi:10.1109/whispers.2011.6080919 · Cited by 9
Quesada (2001) · doi:10.1175/1520-0442(2001)014
Research works printed but not linked: 2
- Stouffer, 2006, Guide to supervisory control and data acquisition (SCADA) and industrial control systems security
- Gorman, 2008, Electricity grid in U.S. penetrated by spies, Wall Street J., A1
Cited by
Sorted by citations
Anomaly Detection in Cyber Physical Systems Using Recurrent Neural Networks
Goh, J., Adepu, S., Tan, M., & Lee, Z. S. (2017) · IEEE International Symposium on High Assurance Systems Engineering (HASE) · doi:10.1109/hase.2017.36 · Cited by 447
Data-Driven Monitoring and Safety Control of Industrial Cyber-Physical Systems: Basics and Beyond
Jiang, Y., Yin, S., & Kaynak, O. (2018) · IEEE Access · doi:10.1109/access.2018.2866403 · Cited by 263
Multi-level Anomaly Detection in Industrial Control Systems via Package Signatures and LSTM Networks
Feng, C., Li, T., & Chana, D. (2017) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn.2017.34 · Cited by 247
Detection of power grid disturbances and cyber-attacks based on machine learning
Wang, D., Wang, X., Zhang, Y., & Jin, L. (2019) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2019.02.008 · Cited by 212
Hương, T. T., Bac, T. P., Long, D. M., Luong, T. D., Dan, N. M., Quang, L. A., Cong, L. T., Thang, B. D., & Tran, K. P. (2021) · Computers in Industry · doi:10.1016/j.compind.2021.103509 · Cited by 201
Metadata
- Authors
- Nader, P., Honeine, P., & Beauseroy, P.
- Affiliations
- Centre National de la Recherche Scientifique (FR)
- ORCID
- Beauseroy, Pierre
- Venue
- IEEE Transactions on Industrial Informatics
- Published
- 2014-11
- Volume
- 10
- Issue
- 4
- Pages
- 2308-2317
- ISSN
- 1551-3203 (ISSN-L)
- 1941-0050
- OpenAlex
- W2087432251
- Cited by
- 122
- References
- 59
- Citations by year
- 2026: 2 · 2025: 7 · 2024: 3 · 2023: 6 · 2022: 17 · 2021: 17 · 2020: 22 · 2019: 11 · 2018: 13 · 2017: 10 · 2016: 7 · 2015: 5 · 2014: 2
- FWCI
- 8.92
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- IEEE Transactions on Industrial Informatics (publishedVersion)
- HAL (submittedVersion)
- Funders
- Mississippi State University
- Université Saint-Esprit de Kaslik
- Agence Nationale de la Recherche
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Artificial Intelligence › Artificial Immune Systems Applications
- Keywords
- intrusion detection, SCADA systems, one-class classification, Lp norms, support vector data description, kernel principal component analysis, Gaussian kernel, industrial cybersecurity
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
