Detection of internal security incidents in cyberphysical systems

This paper addresses the issue of internal security breaches in cyber-physical systems framing it as an anomaly detection problem within the framework of machine learning models. The use of powerful mathematical apparatus embedded in the structure of machine learning models, including models based o...

Full description

Saved in:
Bibliographic Details
Published in:E3S web of conferences 2024, Vol.471, p.4022
Main Author: Iskhakova, Anastasia
Format: Article
Language:English
Citations: Items that this one cites
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This paper addresses the issue of internal security breaches in cyber-physical systems framing it as an anomaly detection problem within the framework of machine learning models. The use of powerful mathematical apparatus embedded in the structure of machine learning models, including models based on artificial neural networks, allows building an autonomous system for detecting internal security breaches with minimal reliance on expert assessments. The determination of user abnormality is made on the basis of average data on log entries of actions in the system identified as abnormal, as well as on statistical data on the number of such entries for each user. The results presented here demonstrate the successful application of these models to the task of identifying insider threats to system access subjects.
ISSN:2267-1242
2267-1242
DOI:10.1051/e3sconf/202447104022