The Simulation Experiment and Research on an Improved Cumulative Sum Anomaly Detection Method

Abstract:

In order to solve the rising serious cyber security problem of the industry control system (ICS) and to improve the reliability of process control of industrial control system, this paper presents an anomaly detection algorithm based on statistical methods. Aimed at the dome temperature control system of hot blast stove in the metallurgical industry, we established that system’s mathematical model and calculate the difference between the predicted output of the model and the measured signal at each moment to form the time-based statistical sequence. Applying the improved non-parametric cumulative sum intrusion detection method, we realizes the online intrusion detection and alarm. The simulation detection experiment shows that the method has a good real-time.

• Periodical: Applied Mechanics and Materials (Volume 743)
• Pages: 219-225
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.743.219
• Online since: March 2015
• Authors: Hua Zhao*
• Keywords: Anomaly Detection, Cyber Security, Industrial Control System (ICS), Statistic Algorithm

References

[1] Kuipers D, Fabro M. Control systems cyber security: Defense in depth strategies[M]. United States. Department of Energy, (2006).

[2] D Dzung, M Naedele, TP Von Hoff, M Crevatin. Security for Industrial Communication Systems [J]. Proceedings of the IEEE, 2005, 93(6): 1152-1177.

DOI: 10.1109/jproc.2005.849714

[3] Verwoerd T, Hunt R. Intrusion detection techniques and approaches [J]. Computer Communications, 2002, 25(15): 1356-1365.

DOI: 10.1016/s0140-3664(02)00037-3

[4] M Basseville, IV Nikiforoy, Detection of Abrupt Changes: Theory and Application [M]. Prentice Hall, (1993).

[5] Zhang Y, Zhao H, Wang L. A non-parametric CUSUM intrusion detection method based on industrial control mode l[J]. Journal of Southeast University. Natural Science Edition, 2012, 42: 55-59.

[6] SI Yi-fang. Fuzzy Adaptive control system in the burning of the Hot Blast Stove [D]. Xi'an University of Architecture and Technology, (2008).

[7] Cárdenas A A, Amin S, Lin Z S, et al. Attacks against process control systems: risk assessment, detection, and response [C]/ Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security. New York: Association for Computing Machinery, 2011: 355-366.

DOI: 10.1145/1966913.1966959