Safeguarding SCADA systems with anomaly detection

Abstract

This paper will show how the accuracy and security of SCADA systems can be improved by using anomaly detection to identify bad values caused by attacks and faults. The performance of invariant induction and n-gram anomaly-detectors will be compared and this paper will also outline plans for taking this work further by integrating the output from several anomaly-detecting techniques using Bayesian networks. Although the methods outlined in this paper are illustrated using the data from an electricity network, this research springs from a more general attempt to improve the security and dependability of SCADA systems using anomaly detection. © Springer-Verlag Berlin Heidelberg 2003.