Robust Intrusion Detection for Industrial Control Systems Using Improved Autoencoder and Bayesian Gaussian Mixture Model

Chao Wang, Hongri Liu, Chao Li, Yunxiao Sun, Wenting Wang and Bailing Wang ()
Additional contact information
Chao Wang: School of Computer Science and Technology, Harbin Institute of Technology, Weihai 264209, China
Hongri Liu: School of Computer Science and Technology, Harbin Institute of Technology, Weihai 264209, China
Chao Li: Weihai Cyberguard Technologies Co., Ltd., Weihai 264209, China
Yunxiao Sun: School of Computer Science and Technology, Harbin Institute of Technology, Weihai 264209, China
Wenting Wang: State Grid Shandong Electric Power Company, Electric Power Research Institute, Jinan 250003, China
Bailing Wang: School of Computer Science and Technology, Harbin Institute of Technology, Weihai 264209, China

Mathematics, 2023, vol. 11, issue 9, 1-18

Abstract: Machine learning-based intrusion detection systems are an effective way to cope with the increasing security threats faced by industrial control systems. Considering that it is hard and expensive to obtain attack data, it is more reasonable to develop a model trained with only normal data. However, both high-dimensional data and the presence of outliers in the training set result in efficiency degradation. In this research, we present a hybrid intrusion detection method to overcome these two problems. First, we created an improved autoencoder that incorporates the deep support vector data description (Deep SVDD) loss into the training of the autoencoder. Under the combination of Deep SVDD loss and reconstruction loss, the novel autoencoder learns a more compact latent representation from high-dimensional data. The density-based spatial clustering of applications with noise algorithm is then used to remove potential outliers in the training data. Finally, a Bayesian Gaussian mixture model is used to identify anomalies. It learns the distribution of the filtered training data and uses the probabilities to classify normal and anomalous samples. We conducted a series of experiments on two intrusion detection datasets to assess performance. The proposed model performs better than other baseline methods when dealing with high-dimensional and contaminated data.

Keywords: industrial control systems; network security; intrusion detection; anomaly detection; autoencoder (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2023
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2227-7390/11/9/2048/pdf (application/pdf)
https://www.mdpi.com/2227-7390/11/9/2048/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:11:y:2023:i:9:p:2048-:d:1133174

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().