Smart City Gnosys

Smart city article details

Title Adaptive Learning Anomaly Detection And Classification Model For Cyber And Physical Threats In Industrial Control Systems
ID_Doc 6268
Authors Ahmadi-Assalemi G.; Al-Khateeb H.; Benson V.; Adamyk B.; Ammi M.
Year 2025
Published IET Cyber-Physical Systems: Theory and Applications, 10, 1
DOI http://dx.doi.org/10.1049/cps2.70004
Abstract A surge of digital technologies adopted into Industrial Control Systems (ICS) exposes critical infrastructures to increasingly hostile and well-organised cybercrime. The increased need for flexibility and convenient administration expands the attack surface. Likewise, an insider with authorised access reveals a difficult-to-detect attack vector. Because of the range of critical services that ICS provide, disruptions to operations could have devastating consequences making ICS an attractive target for sophisticated threat actors. Hence, the authors introduce a novel anomalous behaviour detection model for ICS data streams from physical plant sensors. A model for one-class classification is developed, using stream rebalancing followed by adaptive machine learning algorithms coupled with drift detection methods to detect anomalies from physical plant sensor data. The authors’ approach is shown on ICS datasets. Additionally, a use case illustrates the model's applicability to post-incident investigations as part of a defence-in-depth capability in ICS. The experimental results show that the proposed model achieves an overall Matthews Correlation Coefficient score of 0.999 and Cohen's Kappa score of 0.9986 on limited variable single-type anomalous behaviour per data stream. The results on wide data streams achieve an MCC score of 0.981 and a K score of 0.9808 in the prevalence of multiple types of anomalous instances. © 2025 The Author(s). IET Cyber-Physical Systems: Theory & Applications published by John Wiley & Sons Ltd on behalf of The Institution of Engineering and Technology.
Author Keywords adaptive control; cyber-physical systems; human factors; internet of things; learning (artificial intelligence); sensors; smart cities


Similar Articles


Id Similarity Authors Title Published
53618 View0.922Ahmadi-Assalemi G.; Al-Khateeb H.; Epiphaniou G.; Aggoun A.Super Learner Ensemble For Anomaly Detection And Cyber-Risk Quantification In Industrial Control SystemsIEEE Internet of Things Journal, 9, 15 (2022)
26290 View0.908Ahmadi-Assalemi G.; Al-Khateeb H.; Makonese T.L.; Benson V.; Khan S.; Butt U.J.Feature-Driven Anomalous Behaviour Detection And Incident Classification Model For Ics In Water Treatment PlantsInternational Journal of Electronic Security and Digital Forensics, 17, 1-2 (2025)
3395 View0.86Kayode Saheed Y.; Harazeem Abdulganiyu O.; Ait Tchakoucht T.A Novel Hybrid Ensemble Learning For Anomaly Detection In Industrial Sensor Networks And Scada Systems For Smart City InfrastructuresJournal of King Saud University - Computer and Information Sciences, 35, 5 (2023)
7360 View0.858Brahmia M.-E.-A.; Babouche S.; Ouchani S.; Zghal M.An Adaptive Attack Prediction Framework In Cyber-Physical Systems2022 9th International Conference on Software Defined Systems, SDS 2022 (2022)
2185 View0.852Jayesh T.P.; Pandiaraj K.; Paul A.; Chandran R.R.; Menon P.P.A Hybrid Machine Learning Approach To Anomaly Detection In Industrial IotACCESS 2023 - 2023 3rd International Conference on Advances in Computing, Communication, Embedded and Secure Systems (2023)
36913 View0.851Girubagari N.; Ravi T.N.Methods Of Anomaly Detection For The Prevention And Detection Of Cyber AttacksInternational Journal of Intelligent Engineering Informatics, 11, 4 (2024)