Versatile unsupervised anomaly detection method for RTE-based networks

Author(s)

Sestito, Guilherme Serpa ; Turcato, Afonso Celso ; Dias, Andre Luis ; Ferrari, Paolo ; da Silva, Maira Martins

• Document type: Journal article
• Source: EXPERT SYSTEMS WITH APPLICATIONS; v. 206, p. 8-pg., 2022-06-15.

Abstract

Reliability and dependability are critical demands of the fourth industrial revolution that Real-time Ethernet (RTE) networks have to meet. The use of anomaly detection and prevention techniques can further enhance existing RTE networks. This work presents a general and efficient anomaly detection strategy based on machine learning techniques. The proposal is of general purpose since only normal (i.e not anomalous) traffic data and statistical features are used during the training phase of the classifier. These features are derived from data sets extracted from unsupervised traffic data using a sliding window algorithm. The efficiency of the proposal depends on the proper selection of the sliding window algorithm' parameters. In this work, an optimization strategy appropriately selects the algorithm's step and window size. An Adapted Correlation based on Feature Selection indicates the most relevant features reducing the data dimensionality, improving classifier performance and efficiency. Finally, a One-Class Support Vector Machine algorithm is trained and used for classifying the traffic data sets. The authors applied the proposed anomaly detection strategy in real network data (PROFINET and Ethernet/IP Networks). The results demonstrate the proposal's efficiency and accuracy. (AU)

• FAPESP's process: 18/21336-0 - Towards high speed parallel kinematic machines, Phase II: instrumentation, modeling and control of a flexible manipulator
• Grantee: Maira Martins da Silva
• Support Opportunities: Regular Research Grants