相关实验视频
Updated: Jan 15, 2026

08:15
Data Communication Based on MQTT in a Polymer Extrusion Process
Published on: July 15, 2022
3.8K
基于OPC UA的工业物联网系统的可解释的马尔科夫链-机器学习序列意识异常检测框架
Youness Ghazi1,2, Mohamed Tabaa1, Mohamed Ennaji2
1Pluridisciplinary Laboratory of Research and Innovation (LPRI), EMSI, Casablanca 20330, Morocco.
Sensors (Basel, Switzerland)
|October 16, 2025
概括
本研究介绍了使用OPC统一架构 (OPC UA) 的工业控制系统 (ICS) 的混合顺序异常检测管道. 该方法通过分析顺序数据,提高准确性和提供可解释的见解来增强网络攻击的检测.
科学领域:
- 网络安全 网络安全
- 工业控制系统 (ICS) 是指工业控制系统.
- 网络异常检测检测网络异常检测
背景情况:
- 由于微妙,连续的恶意行动,对ICS的隐形攻击很难被检测出来.
- 在SCADA/ICS中采用OPC统一架构 (OPC UA) 增加了对复杂网络攻击的脆弱性.
- 传统的检测方法未能捕捉到对识别逐渐入侵至关重要的时间依赖.
研究的目的:
- 为OPC UA环境开发混合顺序异常检测管道.
- 解决传统方法在检测隐形网络攻击方面的局限性.
- 加强对关键基础设施的复杂威胁的检测.
主要方法:
- 一个混合管道,将马尔科夫链建模用于时间依赖和机器学习用于异常检测.
- 为了解释性,整合了夏普利添加式解释 (SHAP).
- 应用PC算法用于因果推理,以了解攻击的根本原因.
主要成果:
- 一个二级序列内存显著提高了检测性能.
- 在模拟的中间人 (MITM) 和拒绝服务 (DoS) 攻击中,F1得分增加了 +2.27%,精度增加了 +2.33%,回忆增加了 +3.02%.
- SHAP分析确定了关键的影响特征和转变,而因果图则突出了与正常系统结构的偏差.
结论:
- 拟议的混合顺序异常检测管道有效检测OPC UA系统中的隐形网络攻击.
- 结合顺序记忆和可解释性方法可以提高检测准确性,并提供对攻击机制的可解释性见解.
- 这种方法为保护关键基础设施免受不断变化的网络威胁提供了更强大的解决方案.
相关概念视频
Sequence Networks of Rotating Machines
484
A Y-connected synchronous generator, grounded through a neutral impedance, is designed to produce balanced internal phase voltages with only positive-sequence components. The generator's sequence networks include a source voltage that is exclusively in the positive-sequence network. The sequence components of line-to-ground voltages at the generator terminals illustrate this configuration.
Zero-sequence current induces a voltage drop across the generator's neutral impedance and other...
Zero-sequence current induces a voltage drop across the generator's neutral impedance and other...
484
Steps in Outbreak Investigation
487
In the ever-evolving field of public health, statistical analysis serves as a cornerstone for understanding and managing disease outbreaks. By leveraging various statistical tools, health professionals can predict potential outbreaks, analyze ongoing situations, and devise effective responses to mitigate impact. For that to happen, there are a few possible stages of the analysis:
487
Classification of Systems-I
545
Linearity is a system property characterized by a direct input-output relationship, combining homogeneity and additivity.
Homogeneity dictates that if an input x(t) is multiplied by a constant c, the output y(t) is multiplied by the same constant. Mathematically, this is expressed as:
Homogeneity dictates that if an input x(t) is multiplied by a constant c, the output y(t) is multiplied by the same constant. Mathematically, this is expressed as:
545
Distribution Reliability and Automation
495
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
495
Machines: Problem Solving II
642
Machines are complex structures consisting of movable, pin-connected multi-force members that work together to transmit forces. Consider a lifting tong carrying a 100 kg load. It comprises movable sections DAF and CBG linked together with member AB.
642
Classification of Systems-II
457
Continuous-time systems have continuous input and output signals, with time measured continuously. These systems are generally defined by differential or algebraic equations. For instance, in an RC circuit, the relationship between input and output voltage is expressed through a differential equation derived from Ohm's law and the capacitor relation,
457