ICS-IDS: application of big data analysis in AI-based intrusion detection systems to identify cyberattacks in ICS networks
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Ali, Bakht Sher | - |
dc.contributor.author | Ullah, Inam | - |
dc.contributor.author | Al Shloul, Tamara | - |
dc.contributor.author | Khan, Izhar Ahmed | - |
dc.contributor.author | Khan, Ijaz | - |
dc.contributor.author | Ghadi, Yazeed Yasin | - |
dc.contributor.author | Abdusalomov, Akmalbek | - |
dc.contributor.author | Nasimov, Rashid | - |
dc.contributor.author | Ouahada, Khmaies | - |
dc.contributor.author | Hamam, Habib | - |
dc.date.accessioned | 2024-04-05T12:30:19Z | - |
dc.date.available | 2024-04-05T12:30:19Z | - |
dc.date.issued | 2024-04 | - |
dc.identifier.issn | 0920-8542 | - |
dc.identifier.issn | 1573-0484 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/90895 | - |
dc.description.abstract | The growing volume of data, especially in cases of imbalanced datasets, has posed significant challenges in the classification process, particularly when it comes to identifying cyberattacks on industrial control systems (ICS) networks, which have been a source of concern due to the significant destructive impact of viruses such as Slammer, worms, Stuxnet, Duqu, Seismic Net, and Flame on critical infrastructures in various countries. The key challenge is constructing the intrusion detection system (IDS) framework to deal with imbalanced datasets. Many researchers work especially on binary classification, but multi-classification is a more challenging and still active research area. To deal with the multi-class imbalanced classification problem, we outline an instance-based intrusion detection technique named ICS-IDS, for intrusion detection in ICS systems specific to SCADA networks. The developed technique consists of two core components, the data preparation component, and the detection component. The data preparation component uses the normalization, Fisher Discriminant Analysis, and k-neighbor's method to scale the data, reduce the dimensionality, and resample the dataset, respectively. To learn the latent representations and discern harmful vectors from attacked data, the detection/recognition component leverages an efficient instance-based learner. The proposed ICS-IDS model outperforms existing attractive methods in detecting sophisticated attack vectors in ICS data, achieving 99% accuracy and 99% detection rates (DR) on an industrial network dataset. This proves the methodology's practicality for implementing security in real-world ICS networks. | - |
dc.format.extent | 30 | - |
dc.language | 영어 | - |
dc.language.iso | ENG | - |
dc.publisher | SPRINGER | - |
dc.title | ICS-IDS: application of big data analysis in AI-based intrusion detection systems to identify cyberattacks in ICS networks | - |
dc.type | Article | - |
dc.identifier.wosid | 001100136500004 | - |
dc.identifier.doi | 10.1007/s11227-023-05764-5 | - |
dc.identifier.bibliographicCitation | JOURNAL OF SUPERCOMPUTING, v.80, no.6, pp 7876 - 7905 | - |
dc.description.isOpenAccess | N | - |
dc.identifier.scopusid | 2-s2.0-85176551369 | - |
dc.citation.endPage | 7905 | - |
dc.citation.startPage | 7876 | - |
dc.citation.title | JOURNAL OF SUPERCOMPUTING | - |
dc.citation.volume | 80 | - |
dc.citation.number | 6 | - |
dc.type.docType | Article | - |
dc.publisher.location | 네델란드 | - |
dc.subject.keywordAuthor | Big data | - |
dc.subject.keywordAuthor | Cyber security | - |
dc.subject.keywordAuthor | SCADA | - |
dc.subject.keywordAuthor | Intrusion detection | - |
dc.subject.keywordAuthor | Machine learning | - |
dc.subject.keywordAuthor | Deep learning | - |
dc.subject.keywordPlus | CLASSIFICATION | - |
dc.subject.keywordPlus | PREDICTION | - |
dc.subject.keywordPlus | MACHINE | - |
dc.subject.keywordPlus | SMOTE | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Engineering | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Hardware & Architecture | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Theory & Methods | - |
dc.relation.journalWebOfScienceCategory | Engineering, Electrical & Electronic | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
1342, Seongnam-daero, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea(13120)031-750-5114
COPYRIGHT 2020 Gachon University All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.