Unsupervised anomaly detection for network data streams in industrial control systems

Abstract

The development and integration of information technology and industrial control networks have expanded the magnitude of new data; detecting anomalies or discovering other valid information from them is of vital importance to the stable operation of industrial control systems. This paper proposes an incremental unsupervised anomaly detection method that can quickly analyze and process large-scale real-time data. Our evaluation on the SecureWater Treatment dataset shows that the method is converging to its offline counterpart for infinitely growing data streams.