Effect of network architecture changes on OCSVM based intrusion detection system

Abstract

Intrusion Detection Systems are becoming an important defense mechanism for (supervisory control and data acquisition (SCADA) systems. SCADA systems are likely to become more dynamic leading to a need for research into how changes to the network architecture that is monitored, affect the performance of defense mechanisms. This article investigates how changes in the network architecture of the SCADA system affect the performance of an IDS that is based on the One class Support Vector Machine (OCSVM). Also the article proposes an adaptive mechanism that can cope with such changes and can work in real time situations.