Saghezchi, Firooz B., Mantas, Georgios ORCID: 0000-0002-8074-0417, Violas, Manuel A., de Oliveira Duarte, A. Manuel and Rodriguez, Jonathan (2022) Machine learning for DDoS attack detection in industry 4.0 CPPSs. Electronics, 11 (4):602. ISSN 2079-9292 (Online) (doi:https://doi.org/10.3390/electronics11040602)

Preview

PDF (Publisher VoR) 35250_MANTAS_Machine_learning_for_DDoS_Attack.pdf - Published Version Available under License Creative Commons Attribution. Download (1MB) | Preview

Abstract

The Fourth Industrial Revolution (Industry 4.0) has transformed factories into smart Cyber-Physical Production Systems (CPPSs), where man, product, and machine are fully interconnected across the whole supply chain. Although this digitalization brings enormous advantages through customized, transparent, and agile manufacturing, it introduces a significant number of new attack vectors—e.g., through vulnerable Internet-of-Things (IoT) nodes—that can be leveraged by attackers to launch sophisticated Distributed Denial-of-Service (DDoS) attacks threatening the availability of the production line, business services, or even the human lives. In this article, we adopt a Machine Learning (ML) approach for network anomaly detection and construct different data-driven models to detect DDoS attacks on Industry 4.0 CPPSs. Existing techniques use data either artificially synthesized or collected from Information Technology (IT) networks or small-scale lab testbeds. To address this limitation, we use network traffic data captured from a real-world semiconductor production factory. We extract 45 bidirectional network flow features and construct several labeled datasets for training and testing ML models. We investigate 11 different supervised, unsupervised, and semi-supervised algorithms and assess their performance through extensive simulations. The results show that, in terms of the detection performance, supervised algorithms outperform both unsupervised and semi-supervised ones. In particular, the Decision Tree model attains an Accuracy of 0.999 while confining the False Positive Rate to 0.001.

Item Type:	Article
Additional Information:	This article belongs to the Special Issue Design of Intelligent Intrusion Detection Systems.
Uncontrolled Keywords:	Industry 4.0; cybersecurity; intrusion detection system (IDS); DDoS attack detection; machine learning; SCADA; industrial control system (ICS); cyber-physical system (CPS)
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science T Technology > T Technology (General)
Faculty / School / Research Centre / Research Group:	Faculty of Engineering & Science Faculty of Engineering & Science > School of Engineering (ENG)
Last Modified:	02 Mar 2022 17:20
URI:	http://gala.gre.ac.uk/id/eprint/35250

Actions (login required)

View Item

Downloads