Cyber-physical Systems (CPS) such as power grids, transportation, water supply, and health systems are often targeted by cyber-attacks due to their increasing automation and interconnectivity. Ensuring cybersecurity for these CPS is essential as compromising them could disrupt vital services with potentially extensive consequences. Many studies on cyber-attack detection in CPS focus on domain-specific solutions, which limit their applicability across different CPS environments. Addressing this challenge requires robust cross-domain anomaly detection methods that can generalize across multiple CPS domains. This study presents a hybrid approach for cross-domain anomaly detection in CPS using a Domain-Adversarial Neural Network (DANN) enhanced with an autoencoder and Mutual Information Maximizer (MIM) to improve domain-invariant feature learning. The proposed methodology leverages four distinct CPS datasets: water distribution testbed, gas pipeline, power system and Hardware in the Loop Industrial Control System (HAI) datasets. A comprehensive hyperparameter tuning process is conducted to optimize the architecture, with multiple configurations evaluated based on classification accuracy and F1-scores across domains. The model performance is assessed on gas pipeline, power system and HAI datasets, and the best configuration is selected for anomaly detection in a cross-domain CPS context. Results highlight the model’s potential to transfer learned representations effectively across different CPS domains.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Towards Cross-Domain Anomaly Detection in Cyber-Physical Systems: A Hybrid Approach

  • Yaa Takyiwaa Acquaah,
  • Kaushik Roy

摘要

Cyber-physical Systems (CPS) such as power grids, transportation, water supply, and health systems are often targeted by cyber-attacks due to their increasing automation and interconnectivity. Ensuring cybersecurity for these CPS is essential as compromising them could disrupt vital services with potentially extensive consequences. Many studies on cyber-attack detection in CPS focus on domain-specific solutions, which limit their applicability across different CPS environments. Addressing this challenge requires robust cross-domain anomaly detection methods that can generalize across multiple CPS domains. This study presents a hybrid approach for cross-domain anomaly detection in CPS using a Domain-Adversarial Neural Network (DANN) enhanced with an autoencoder and Mutual Information Maximizer (MIM) to improve domain-invariant feature learning. The proposed methodology leverages four distinct CPS datasets: water distribution testbed, gas pipeline, power system and Hardware in the Loop Industrial Control System (HAI) datasets. A comprehensive hyperparameter tuning process is conducted to optimize the architecture, with multiple configurations evaluated based on classification accuracy and F1-scores across domains. The model performance is assessed on gas pipeline, power system and HAI datasets, and the best configuration is selected for anomaly detection in a cross-domain CPS context. Results highlight the model’s potential to transfer learned representations effectively across different CPS domains.