Versatile unsupervised anomaly detection method for RTE-based networks

Autor(es)

Sestito, Guilherme Serpa ; Turcato, Afonso Celso ; Dias, Andre Luis ; Ferrari, Paolo ; da Silva, Maira Martins

• Tipo de documento: Artigo Científico
• Fonte: EXPERT SYSTEMS WITH APPLICATIONS; v. 206, p. 8-pg., 2022-06-15.

Resumo

Reliability and dependability are critical demands of the fourth industrial revolution that Real-time Ethernet (RTE) networks have to meet. The use of anomaly detection and prevention techniques can further enhance existing RTE networks. This work presents a general and efficient anomaly detection strategy based on machine learning techniques. The proposal is of general purpose since only normal (i.e not anomalous) traffic data and statistical features are used during the training phase of the classifier. These features are derived from data sets extracted from unsupervised traffic data using a sliding window algorithm. The efficiency of the proposal depends on the proper selection of the sliding window algorithm' parameters. In this work, an optimization strategy appropriately selects the algorithm's step and window size. An Adapted Correlation based on Feature Selection indicates the most relevant features reducing the data dimensionality, improving classifier performance and efficiency. Finally, a One-Class Support Vector Machine algorithm is trained and used for classifying the traffic data sets. The authors applied the proposed anomaly detection strategy in real network data (PROFINET and Ethernet/IP Networks). The results demonstrate the proposal's efficiency and accuracy. (AU)

• Processo FAPESP: 18/21336-0 - Alcançando altas acelerações com manipuladores paralelos, Fase II: instrumentação, modelagem e controle de um manipulador flexível
• Beneficiário: Maira Martins da Silva
• Modalidade de apoio: Auxílio à Pesquisa - Regular