Detecting Anomalies in Programmable Logic Controllers Using Unsupervised Machine Learning - Advances in Digital Forensics XV
Conference Papers Year : 2019

Detecting Anomalies in Programmable Logic Controllers Using Unsupervised Machine Learning

Abstract

Supervisory control and data acquisition systems have been employed for decades to communicate with and coordinate industrial processes. These systems incorporate numerous programmable logic controllers that manage the operations of industrial equipment based on sensor information. Due to the important roles that programmable logic controllers play in industrial facilities, these microprocessor-based systems are exposed to serious cyber threats.This chapter describes an innovative methodology that leverages unsupervised machine learning to monitor the states of programmable logic controllers to uncover latent defects and anomalies. The methodology, which employs a one-class support vector machine, is able to detect anomalies without being bound to specific scenarios or requiring detailed knowledge about the control logic. A case study involving a traffic light simulation demonstrates that anomalies are detected with high accuracy, enabling the prompt mitigation of the underlying problems.
Fichier principal
Vignette du fichier
488399_1_En_7_Chapter.pdf (258.31 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-02534603 , version 1 (07-04-2020)

Licence

Identifiers

Cite

Chun-Fai Chan, Kam-Pui Chow, Cesar Mak, Raymond Chan. Detecting Anomalies in Programmable Logic Controllers Using Unsupervised Machine Learning. 15th IFIP International Conference on Digital Forensics (DigitalForensics), Jan 2019, Orlando, FL, United States. pp.119-130, ⟨10.1007/978-3-030-28752-8_7⟩. ⟨hal-02534603⟩
85 View
108 Download

Altmetric

Share

More