Industrial Control System Attack Detection Model Based on Bayesian Network and Timed Automata

The current industrial control system attack detection methods are single, the detection results are fuzzy and cannot be applied to the domestic industrial environment. In response to the above problems, an industrial control system attack detection model based on Bayesian network (BN) and Timed automata (TA) theory is proposed. First, collect the real industrial purification data of the aluminum factory, that is, the sensor and actuator signals, and preprocess the signals through time compression, segmentation, and queue division; secondly, establish Timed automata and Bayesian network models respectively, using probability time automatization The computer simulates the regular behavior of the time series, and at the same time uses the Bayesian network to build the dependency relationship between the sensor and the actuator; finally, the model's detection result of the attack data is calculated. Theoretical analysis and experimental results show that compared with Deep Neural Network (DNN) and Support Vector Machine (SVM), the model in the article has improved time and accuracy.