Smart City Gnosys

Smart city article details

Title Feature-Driven Anomalous Behaviour Detection And Incident Classification Model For Ics In Water Treatment Plants
ID_Doc 26290
Authors Ahmadi-Assalemi G.; Al-Khateeb H.; Makonese T.L.; Benson V.; Khan S.; Butt U.J.
Year 2025
Published International Journal of Electronic Security and Digital Forensics, 17, 1-2
DOI http://dx.doi.org/10.1504/IJESDF.2025.143470
Abstract Industry 5.0 envisions humans working alongside emerging technologies and enabled by the fusion of devices and sensors using information and communication technologies (ICT) to facilitate process automation, monitoring and distributed control in industrial control systems (ICS). However, the application of disruptor technologies and exposure of insecure devices broadens the attack surface making ICS an attractive target for sophisticated threat actors. Furthermore, ICS deliver a range of critical services hence disruption of industrial operations and services could have serious consequences. This study proposes an anomaly-based intrusion detection system for a water treatment plant based on a new model to determine variable significance for improved detection accuracy using machine learning (ML) algorithms coupled with incident classification based on functional impact. Determining statistical significance for independent ICS variables was addressed using logistic regression. Overall, 39 variables are deemed relevant in diagnosing the system state of the ICS operation to be expected or under attack. Our approach is validated using the secure water treatment (SWaT) testbed. Experimental results reveal that anomaly detection was effective using k-NN, ANN and SVM achieving an F1-score of 0.99, 0.98 and 0.97 respectively. Copyright © 2025 Inderscience Enterprises Ltd.
Author Keywords advanced persistent threats; APT; artificial intelligence; critical national infrastructure; fifth industrial revolution; operational technology; smart city


Similar Articles


Id Similarity Authors Title Published
6268 View0.908Ahmadi-Assalemi G.; Al-Khateeb H.; Benson V.; Adamyk B.; Ammi M.Adaptive Learning Anomaly Detection And Classification Model For Cyber And Physical Threats In Industrial Control SystemsIET Cyber-Physical Systems: Theory and Applications, 10, 1 (2025)
53618 View0.885Ahmadi-Assalemi G.; Al-Khateeb H.; Epiphaniou G.; Aggoun A.Super Learner Ensemble For Anomaly Detection And Cyber-Risk Quantification In Industrial Control SystemsIEEE Internet of Things Journal, 9, 15 (2022)
9609 View0.87Almazyad I.; Shao S.; Hariri S.; Kholidy H.A.Anomaly Behavior Analysis Of Smart Water Treatment Facility Service: Design, Analysis, And EvaluationProceedings of IEEE/ACS International Conference on Computer Systems and Applications, AICCSA (2023)
3395 View0.86Kayode Saheed Y.; Harazeem Abdulganiyu O.; Ait Tchakoucht T.A Novel Hybrid Ensemble Learning For Anomaly Detection In Industrial Sensor Networks And Scada Systems For Smart City InfrastructuresJournal of King Saud University - Computer and Information Sciences, 35, 5 (2023)