Intrusion Detection System for SCADA Networks

摘要

This paper presents a new approach for detecting intrusions in SCADA system. The field intrusion detection system (FIDS) presented here is based on hierarchical principal component analysis (HPCA). For testing purposes network traffic from an actual SCADA system, which controls a chemical distillation process, was used for offline analysis and evaluation of the proposed intrusion detection system. Detailed analysis of the FIDS unit is discussed in this paper, including the receiver operating characteristic (ROC) curve and scalability considerations. Initial experimental intrusion detection results are promising, as is the projected scalability of the detection system to larger installations.