DeepFed: Federated Deep Learning for Intrusion Detection in Industrial Cyber-Physical Systems

被引:363
作者
Li, Beibei [1 ]
Wu, Yuhao [1 ]
Song, Jiarui [1 ]
Lu, Rongxing [2 ]
Li, Tao [1 ]
Zhao, Liang [1 ]
机构
[1] Sichuan Univ, Coll Cybersecur, Chengdu 610065, Peoples R China
[2] Univ New Brunswick, Fac Comp Sci, Fredericton, NB E3B 5A3, Canada
基金
中国博士后科学基金; 中国国家自然科学基金;
关键词
Intrusion detection; Machine learning; Servers; Data models; Protocols; Cyberattack; Data privacy; deep learning; federated learning; industrial cyber– physical system (CPS); intrusion detection; ATTACKS;
D O I
10.1109/TII.2020.3023430
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The rapid convergence of legacy industrial infrastructures with intelligent networking and computing technologies (e.g., 5G, software-defined networking, and artificial intelligence), have dramatically increased the attack surface of industrial cyber-physical systems (CPSs). However, withstanding cyber threats to such large-scale, complex, and heterogeneous industrial CPSs has been extremely challenging, due to the insufficiency of high-quality attack examples. In this article, we propose a novel federated deep learning scheme, named DeepFed, to detect cyber threats against industrial CPSs. Specifically, we first design a new deep learning-based intrusion detection model for industrial CPSs, by making use of a convolutional neural network and a gated recurrent unit. Second, we develop a federated learning framework, allowing multiple industrial CPSs to collectively build a comprehensive intrusion detection model in a privacy-preserving way. Further, a Paillier cryptosystem-based secure communication protocol is crafted to preserve the security and privacy of model parameters through the training process. Extensive experiments on a real industrial CPS dataset demonstrate the high effectiveness of the proposed DeepFed scheme in detecting various types of cyber threats to industrial CPSs and the superiorities over state-of-the-art schemes.
引用
收藏
页码:5615 / 5624
页数:10
相关论文
共 28 条
[1]   BLITHE: Behavior Rule-Based Insider Threat Detection for Smart Grid [J].
Bao, Haiyong ;
Lu, Rongxing ;
Li, Beibei ;
Deng, Ruilong .
IEEE INTERNET OF THINGS JOURNAL, 2016, 3 (02) :190-205
[2]   Cyber espionage through Botnets [J].
Bederna, Zsolt ;
Szadeczky, Tamas .
SECURITY JOURNAL, 2020, 33 (01) :43-62
[3]   Ubiquitous Monitoring for Industrial Cyber-Physical Systems Over Relay-Assisted Wireless Sensor Networks [J].
Chen, Cailian ;
Yan, Jing ;
Lu, Ning ;
Wang, Yiyin ;
Yang, Xian ;
Guan, Xinping .
IEEE TRANSACTIONS ON EMERGING TOPICS IN COMPUTING, 2015, 3 (03) :352-362
[4]   FedHealth: A Federated Transfer Learning Framework for Wearable Healthcare [J].
Chen, Yiqiang ;
Qin, Xin ;
Wang, Jindong ;
Yu, Chaohui ;
Gao, Wen .
IEEE INTELLIGENT SYSTEMS, 2020, 35 (04) :83-93
[5]  
Dworkin M.J., 2001, FIPS Pub, V197
[6]  
Falliere N., 2011, W32. stuxnet dossier, V5
[7]  
Felker J., 2017, IND CONTROL SYSTEMS, VS508C
[8]   Efficient and Privacy-Enhanced Federated Learning for Industrial Artificial Intelligence [J].
Hao, Meng ;
Li, Hongwei ;
Luo, Xizhao ;
Xu, Guowen ;
Yang, Haomiao ;
Liu, Sen .
IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS, 2020, 16 (10) :6532-6542
[9]   Deep Learning Detection of Electricity Theft Cyber-Attacks in Renewable Distributed Generation [J].
Ismail, Muhammad ;
Shaaban, Mostafa F. ;
Naidu, Mahesh ;
Serpedin, Erchin .
IEEE TRANSACTIONS ON SMART GRID, 2020, 11 (04) :3428-3437
[10]   Distributed host-based collaborative detection for false data injection attacks in smart grid cyber-physical system [J].
Li, Beibei ;
Lu, Rongxing ;
Wang, Wei ;
Choo, Kim-Kwang Raymond .
JOURNAL OF PARALLEL AND DISTRIBUTED COMPUTING, 2017, 103 :32-41