| Title | Detection of Malicious SCADA Communications via Multi-Subspace Feature Selection |
| Publication Type | Conference Paper |
| Year of Publication | 2020 |
| Authors | Hallaji, Ehsan, Razavi-Far, Roozbeh, Saif, Mehrdad |
| Conference Name | 2020 International Joint Conference on Neural Networks (IJCNN) |
| Keywords | compositionality, cyberphysical systems, Data models, Ensemble Learning, feature extraction, feature selection, Human Behavior, human factors, Intrusion detection, Mutual information, Pipelines, pubcrawl, Redundancy, resilience, Resiliency, SCADA, SCADA System Security, SCADA systems, SCADA Systems Security, supervised learning |
| Abstract | Security maintenance of Supervisory Control and Data Acquisition (SCADA) systems has been a point of interest during recent years. Numerous research works have been dedicated to the design of intrusion detection systems for securing SCADA communications. Nevertheless, these data-driven techniques are usually dependant on the quality of the monitored data. In this work, we propose a novel feature selection approach, called MSFS, to tackle undesirable quality of data caused by feature redundancy. In contrast to most feature selection techniques, the proposed method models each class in a different subspace, where it is optimally discriminated. This has been accomplished by resorting to ensemble learning, which enables the usage of multiple feature sets in the same feature space. The proposed method is then utilized to perform intrusion detection in smaller subspaces, which brings about efficiency and accuracy. Moreover, a comparative study is performed on a number of advanced feature selection algorithms. Furthermore, a dataset obtained from the SCADA system of a gas pipeline is employed to enable a realistic simulation. The results indicate the proposed approach extensively improves the detection performance in terms of classification accuracy and standard deviation. |
| DOI | 10.1109/IJCNN48605.2020.9207066 |
| Citation Key | hallaji_detection_2020 |
Detection of Malicious SCADA Communications via Multi-Subspace Feature Selection