Adversarial learning is used to test the robustness of machine learning algorithms under attack and create attacks that deceive the anomaly detection methods in Industrial Control System (ICS). Given that security assessment of an ICS demands that an exhaustive set of possible attack patterns is studied, in this work, we propose an association rule mining-based attack generation technique. The technique has been implemented using data from a secure Water Treatment plant. The proposed technique was able to generate more than 300,000 attack patterns constituting a vast majority of new attack vectors which were not seen before. Automatically generated attacks improve our understanding of the potential attacks and enable the design of robust attack detection techniques.
翻译:反向学习被用来测试受到攻击的机器学习算法的稳健性,并制造欺骗工业控制系统异常现象探测方法的攻击;鉴于对工业控制系统进行的安全评估要求研究一套详尽无遗的可能攻击模式,我们在此工作中提议采用以采矿为基础的联合规则攻击生成技术;该技术是使用一个安全的水处理厂的数据实施的;拟议的技术能够产生30多万个攻击模式,构成以前从未见过的绝大多数新的攻击矢量;自动产生的攻击提高了我们对潜在攻击的了解,并使得能够设计强有力的攻击探测技术。