Visible to the public An Integrated Framework for Privacy-Preserving Based Anomaly Detection for Cyber-Physical Systems

TitleAn Integrated Framework for Privacy-Preserving Based Anomaly Detection for Cyber-Physical Systems
Publication TypeJournal Article
Year of Publication2021
AuthorsKeshk, Marwa, Sitnikova, Elena, Moustafa, Nour, Hu, Jiankun, Khalil, Ibrahim
JournalIEEE Transactions on Sustainable Computing
Volume6
Pagination66–79
ISSN2377-3782
Keywordsanomaly detection, CPS, cps privacy, cyber-attacks, data privacy, Gaussian mixture, human factors, Intrusion detection, Kalman filter, Power systems, privacy, privacy preservation, pubcrawl, SCADA, SCADA systems
AbstractProtecting Cyber-physical Systems (CPSs) is highly important for preserving sensitive information and detecting cyber threats. Developing a robust privacy-preserving anomaly detection method requires physical and network data about the systems, such as Supervisory Control and Data Acquisition (SCADA), for protecting original data and recognising cyber-attacks. In this paper, a new privacy-preserving anomaly detection framework, so-called PPAD-CPS, is proposed for protecting confidential information and discovering malicious observations in power systems and their network traffic. The framework involves two main modules. First, a data pre-processing module is suggested for filtering and transforming original data into a new format that achieves the target of privacy preservation. Second, an anomaly detection module is suggested using a Gaussian Mixture Model (GMM) and Kalman Filter (KF) for precisely estimating the posterior probabilities of legitimate and anomalous events. The performance of the PPAD-CPS framework is assessed using two public datasets, namely the Power System and UNSW-NB15 dataset. The experimental results show that the framework is more effective than four recent techniques for obtaining high privacy levels. Moreover, the framework outperforms seven peer anomaly detection techniques in terms of detection rate, false positive rate, and computational time.
NotesConference Name: IEEE Transactions on Sustainable Computing
DOI10.1109/TSUSC.2019.2906657
Citation Keykeshk_integrated_2021