Abnormal detection technology of industrial control system based on transfer learning

Abstract

In industrial control systems, industrial infrastructure is often attacked by hackers. Due to the serious sample imbalance in industrial control data, the traditional machine learning method has poor performance in anomaly detection. In this paper, TrAdaboost algorithm is applied to industrial control anomaly detection. The samples that are easy to classify are taken as the source domain data, and the samples with poor classification effect are taken as the target domain. The source domain data is used to guide the target domain data training. Then, we improve the traditional TrAdaboost algorithm from two aspects of initial weight and final classifier, and apply it to industrial control anomaly detection. Finally, the performance of the algorithm on two different industrial control data sets is verified. And the improved algorithm is compared with other traditional algorithms. The experimental results show that the improved TrAdaboost algorithm has a significant advantage in predicting categories with a small sample size. This algorithm can accurately identify a few abnormal samples. Moreover, the F1 value, recall and precision value of the improved TrAdaboost algorithm on the two data sets have been significantly improved. This indicates that the improved TrAdaboost algorithm greatly improves the overall prediction accuracy of the model.