Skip to Main content Skip to Navigation
Conference papers

Detecting Anomalies in Programmable Logic Controllers Using Unsupervised Machine Learning

Abstract : Supervisory control and data acquisition systems have been employed for decades to communicate with and coordinate industrial processes. These systems incorporate numerous programmable logic controllers that manage the operations of industrial equipment based on sensor information. Due to the important roles that programmable logic controllers play in industrial facilities, these microprocessor-based systems are exposed to serious cyber threats.This chapter describes an innovative methodology that leverages unsupervised machine learning to monitor the states of programmable logic controllers to uncover latent defects and anomalies. The methodology, which employs a one-class support vector machine, is able to detect anomalies without being bound to specific scenarios or requiring detailed knowledge about the control logic. A case study involving a traffic light simulation demonstrates that anomalies are detected with high accuracy, enabling the prompt mitigation of the underlying problems.
Document type :
Conference papers
Complete list of metadata

Cited literature [22 references]  Display  Hide  Download
Contributor : Hal Ifip <>
Submitted on : Tuesday, April 7, 2020 - 10:37:07 AM
Last modification on : Tuesday, April 7, 2020 - 10:42:40 AM


 Restricted access
To satisfy the distribution rights of the publisher, the document is embargoed until : 2022-01-01

Please log in to resquest access to the document


Distributed under a Creative Commons Attribution 4.0 International License



Chun-Fai Chan, Kam-Pui Chow, Cesar Mak, Raymond Chan. Detecting Anomalies in Programmable Logic Controllers Using Unsupervised Machine Learning. 15th IFIP International Conference on Digital Forensics (DigitalForensics), Jan 2019, Orlando, FL, United States. pp.119-130, ⟨10.1007/978-3-030-28752-8_7⟩. ⟨hal-02534603⟩



Record views