Simplicity over Complexity: An ARN-Based Intrusion Detection Method for Industrial Control Network

TL;DR

This paper introduces a novel ARN-based intrusion detection method tailored for industrial control networks, effectively handling complex traffic data and demonstrating high accuracy and efficiency through theoretical analysis and prototype testing.

Contribution

The paper proposes a new associative recurrent network (ARN) model and applies it to intrusion detection in ICN, achieving state-of-the-art accuracy and efficiency.

Findings

Accuracy of 95.48% on SWaT dataset

Accuracy of 97.61% on UNSW-NB15 dataset

High efficiency demonstrated through complexity analysis

Abstract

Industrial control network (ICN) is characterized by real-time responsiveness and reliability, which plays a key role in increasing production speed, rational and efficient processing, and managing the production process. Despite tremendous advantages, ICN inevitably struggles with some challenges, such as malicious user intrusion and hacker attack. To detect malicious intrusions in ICN, intrusion detection systems have been deployed. However, in ICN, network traffic data is equipped with characteristics of large scale, irregularity, multiple features, temporal correlation and high dimensionality, which greatly affect the efficiency and performance. To properly solve the above problems, we design a new intrusion detection method for ICN. Specifically, we first design a novel neural network model called associative recurrent network (ARN), which can properly handle the relationship between past moment hidden state and current moment information. Then, we adopt ARN to design a new intrusion detection method that can efficiently and accurately detect malicious intrusions in ICN. Subsequently, we demonstrate the high efficiency of our proposed method through theoretical computational complexity analysis. Finally, we develop a prototype implementation to evaluate the accuracy. The experimental results prove that our proposed method has sate-of-the-art performance on both the ICN dataset SWaT and the conventional network traffic dataset UNSW-NB15. The accuracies on the SWaT dataset and the UNSW-NB15 dataset reach 95.48% and 97.61%, respectively.