산업제어시스템에서 앙상블 순환신경망 모델을 이용한 비정상 탐지
Abnormal Detection for Industrial Control Systems Using Ensemble Recurrent Neural Networks Model
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
최근 산업제어시스템은 인터넷에 연결하지 않은 폐쇄적 상태로 운영하는 과거와 달리 원격지에서 데이터를 확인하고 시스템 유지보수를 위해서 개방적‧통합적인 스마트한 환경으로 변화하고 있다. 반면에 상호연결성이 증가하는 만큼 산업제어시스템을 대상으로 사이버 공격이 증가함에 따라 산업 공정의 비정상 탐지를 위한 다양한 연구가 진행되고 있다. 산업 공정의 결정적‧규칙적인 점을 고려하여 정상데이터만을 학습시킨 탐지 모델의 결과 값과 실제 값을 비교해서 비정상 여부를 판별하는 것이 적절하다고 할 수 있다. 본 논문에서는 HAI 데이터셋 20.07과 21.03을 이용하며, 순환신경망에 게이트 구조가 적용된 GRU 알고리즘으로 서로 다른 타임 스텝을 적용한 모델을 결합하여 앙상블 모델을 생성한다. 그리고 다양한 성능평가 분석을 통해 단일 모델과 앙상블 순환신경망 모델의 탐지 성능을 비교하였으며 제안하는 모델이 산업제어시스템에서 비정상 탐지하는데 더욱 적합한 것으로 확인하였다.
Abstract
Recently, as cyber attacks targeting industrial control systems increase, various studies are being conducted on the detection of abnormalities in industrial processes. Considering that the industrial process is deterministic and regular, It is appropriate to determine abnormality by comparing the predicted value of the detection model from which normal data is trained and the actual value. In this paper, HAI Datasets 20.07 and 21.03 are used. In addition, an ensemble model is created by combining models that have applied different time steps to Gated Recurrent Units. Then, the detection performance of the single model and the ensemble recurrent neural networks model were compared through various performance evaluation analysis, and It was confirmed that the proposed model is more suitable for abnormal detection in industrial control systems.
참고문헌 (21)
- Choi Seungoh, "Cyber-Physical System TestBed Technology Research Trend", Jonornal of The Korea Institute of information Security & Cryptology, 27(2), pp.46~56 (2017)
- Kwon Sungmoon, "SWaT testbed dataset and Abnormal Detection Trend", Jonornal of The Korea Institute of information Security & Cryptology, 29(2), pp.29~35 (2019)
- Keith Stouffer, "Guide to Industrial Control System Security", NIST SP 800-82, ~ (2015)
- Hyuk-ki Shin, "HAI 1.0:HIL-based Augmented ICS Security Dataset", 13th USENIX Workshop on Cyber Security Experimentation and Test (2020)
- "HIL-based Augmented ICS(HAI) Security Dataset"[URL]
- Won-seok Hwang, "Time-Series Aware Precision and Recall for Anomaly Detection–Considering Variety of Detection Result and Adresing Ambiguous Labeling", CIKM'19:Procedings of the 28th ACM International Conference on Information and Knowledge Management (2019)
- "Secure Water Treatment (SWaT)"[URL]
- Jonathan Goh, "Anomaly Detection in Cyber Physical Systems Using Recurrent Neural Networks", 2017 IEEE 18th International Symposium on High Assurance Systems Engineering (HASE) (2017)
- Moshe Kravchik, "Detecting Cyber Attacks in Industrial Control Systems Using Convolutional Neural Networks", Proceedings of the 2018 Workshop on Cyber-Physical Systems Security and PrivaCy (2018)
- Simon Duque Anton, "Time is of the Essence: Machine Learning-Based Intrusion Detection in Industrial Time Series Data", 2018 IEEE International Conference on Data Mining Workshops (ICDMW) (2018)
- Dan Li, "Anomaly Detection with Generative Adversarial Networks for Multivariate Time Series", International Workshop on Big Data, Streams and Heterogeneous Source Mining: Algorithms, Systems, Programming Models and Applications (2019)
- Jonguk Kim, "Anomaly Detection for Industrial Control Systems Using Sequence-to-Sequence Neural Networks", Workshop on the Security of Industrial Control Systems & of Cyber-Physical Systems(CyberICPS 2019) in conjunction with ESORICS 2019 (2019)
- "SCADA network datasets"[URL]
- Julien Audibert, "USAD: UnSupervised Anomaly Detection on Multivariate Time Series", Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining (2020)
- Mokhtari S, "A Machine Learning Approach for Anomaly Detection in Industrial Control Systems Based on Measurement Data", Electronics, 10(4) (2021)
- Doyeon Kim, "Stacked-Autoencoder Based Anomaly Detection with Industrial Control System", Studies in Computational Intelligence, 951, pp.181~191 (2021)
- Xingchao Bian, "Detecting Anomalies in Time-Series Data using Unsupervised Learning and Analysis on Infrequent", 전기전자학회논문지, 24(4), pp.1011~1016 (2020), 한국전기전자학회[DOI]
- Kyunghyun Cho, "Learning Phrase Representations using RNN Encoder-Decoder for Statistical Machine Translation", Proceedings of the Empirical Methods in Natural Language Processing (EMNLP) (2014)
- 류나현, "다중선형회귀모형에서의 변수선택기법 평가", 대한산업공학회지, 42(5), pp.314~326 (2016), 대한산업공학회[DOI]
- "Colab Pro"[URL]
- Ilya Loshchilov, "Decoupled weight decay regularization", International Conference on Learning Representations(ICLR) (2019)