會議論文
| 學年 | 106 |
|---|---|
| 學期 | 1 |
| 發表日期 | 2017-11-22 |
| 作品名稱 | Using Data Mining Methods to Detect Simulated Intrusions on a Modbus Network |
| 作品名稱（其他語言） | |
| 著者 | Szu-Chuang Li; Yennun Huang; Bo-Chen Tai; Chi-Ta Lin |
| 作品所屬單位 | |
| 出版者 | |
| 會議名稱 | IEEE SC2 Conference |
| 會議地點 | Kanazawa, Japan |
| 摘要 | In the era of Industry 4.0 we seek to create a smart factory environment in which everything is connected and well coordinated. Smart factories will also be connected to cloud service and/or all kinds of partners outside the boundary of the factory to achieve even better efficiency. However network connectivity also brings threats along with the promise of better efficiency, and makes Smart factories more vulnerable to intruders. There were already security incidents such as Iran's nuclear facilities' infection by the Stuxnet virus and German's steel mill destroyed by hackers in 2014. To protect smart factories from such threats traditional means of intrusion detection on the Internet could be used, but we must also refine them and have them adapted to the context of Industry 4.0. For example, network traffic in a smart factory might be more uniformed and predictable compared to the traffic on the Internet, but one should tolerate much less anomaly as the traffic is usually mission critical, and will cause much more loss once intrusion happens. The most widely used signature-based intrusion detection systems come with a large library of signatures that contains known attack have been proved to be very useful, but without the ability to detect unknown attack. We turn to supervised data mining algorithms to detect intrusions, which will help us to detect intrusions with similar properties with known attacks but not necessarily fully match the signatures in the library. In this study a simulated smart factory environment was built and a series of attacks were implemented. Neural network and decision trees were used to classify the traffic generated from this simulated environment. From the experiments we conclude that for the data set we used, decision tree performed better than neural network for detecting intrusion as it provides better accuracy, lower false negative rate and faster model building time. |
| 關鍵字 | Modbus;intrusion detection;decision tree;neural network;Industry 4.0 |
| 語言 | en |
| 收錄於 | |
| 會議性質 | 國際 |
| 校內研討會地點 | 無 |
| 研討會時間 | 20171122~20171125 |
| 通訊作者 | |
| 國別 | JPN |
| 公開徵稿 | |
| 出版型式 | |
| 出處 | 2017 IEEE 7th International Symposium on Cloud and Service Computing (SC2), p.143-148 |
| 相關連結 |
機構典藏連結 ( http://tkuir.lib.tku.edu.tw:8080/dspace/handle/987654321/120182 ) |