NeuroPAD: A Neural Process-level Anomaly Detection for Industrial Control Systems

NeuroPAD：工业控制系统的神经过程级异常检测

• 批准号: 548563-2019
• 负责人: Ghaderi, Majid
• 金额: $ 5.83万
• 依托单位: University of Calgary
• 依托单位国家: 加拿大
• 项目类别: Alliance Grants
• 财政年份: 2020
• 资助国家: 加拿大
• 起止时间: 2020-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=699809
• 关键词: NeuroPAD; Neural; Process; level; Anomaly

Industrial control system (ICS) refers to the information system used to monitor and control the industrial processes such as manufacturing, production and distribution. While early ICSs were physically isolated from the outside, today's ICSs have evolved to become integrated with the public Internet. Unfortunately, connecting ICSs to Internet creates a multitude of novel threats and attacks against them, as demonstrated in several recent high-profile incidents around the world. Conventional off-the-shelf IT security solutions are ill-suited for defending against stealthy attacks targeting ICS. To defend against this new threat landscape, novel approaches for attack prevention and detection that are tailored to ICS are necessary. The NeuroPAD project is about process-level anomaly detection in ICS. The hypothesis of the NeuroPAD project is that the physical process controlled by the ICS can be modelled by its inputs and outputs to confirm that the control commands sent to the field devices are executed correctly and that the information coming from sensors is consistent with the expected behavior of the system. It proposes to achieve this goal by developing purely data-driven approaches, in which the dynamics of the physical process are learnt from direct system observations using artificial neural networks. Industrial control systems are vital to the operation of Canada's critical infrastructure. The NeuroPAD project is expected to generate new theoretical insights as well as engineering guidelines to serve as foundation for innovative designs in ICS cybersecurity products. Not only this will lead to economic impact by targeting an expanding market but also societal impact by creating solutions that could be used to protect vital critical infrastructures and industrial processes that impact lives and wellbeing of Canadians across the country.

工业控制系统（ICS）是指用于监视和控制工业过程（例如制造，生产和分销）的信息系统。尽管早期的ICS与外部物理隔离，但今天的ICS已经演变为与公共互联网融合在一起。不幸的是，将ICS连接到Internet会造成许多新颖的威胁和对它们的攻击，这在全球最近的几起备受瞩目的事件中证明了这一点。常规的现成的IT安全解决方案不适合防御针对IC的隐秘攻击。为了防止这种新的威胁格局，必须为ICS量身定制的新型预防攻击和检测方法。 Neuropad项目是关于IC中的过程级异常检测。 Neuropad项目的假设是，由IC控制的物理过程可以通过其输入和输出来建模，以确认发送到现场设备的控制命令正确执行，并且来自传感器的信息与系统的预期行为一致。它建议通过开发纯粹的数据驱动方法来实现这一目标，在这种方法中，使用人工神经网络从直接系统观察中学习了物理过程的动态。 工业控制系统对于加拿大关键基础设施的运作至关重要。 Neuropad项目有望产生新的理论见解以及工程指南，以作为ICS网络安全产品创新设计的基础。这不仅将通过针对不断扩大的市场来实现经济影响，而且还通过创建可以用来保护关键关键的基础设施和工业流程的解决方案来影响社会影响，从而影响全国加拿大人生活和福祉的重要关键基础设施和工业过程。