Enhanced CNN-LSTM Deep Learning for SCADA IDS Featuring Hurst Parameter Self-Similarity

Balla, Asaad and Habaebi, Mohamed Hadi and Elsheikh, Elfatih A. A. and Islam, Md Rafiqul and Suliman, F.M. and mubarak, Sinil (2024) Enhanced CNN-LSTM Deep Learning for SCADA IDS Featuring Hurst Parameter Self-Similarity. IEEE ACCESS Journal, 12. pp. 6100-6116. ISSN 2169-3536 E-ISSN 2169-3536

	PDF - Published Version Restricted to Registered users only Download (2MB) | Request a copy
	PDF - Supplemental Material Restricted to Registered users only Download (490kB) | Request a copy

Abstract

T Supervisory Control and Data Acquisition (SCADA) systems are crucial for modern industrial processes and securing them against increasing cyber threats is a significant challenge. This study presents an advanced method for bolstering SCADA security by employing a modified hybrid deep learning model. A key innovation in this work is integrating the Self-similarity Hurst parameter into the dataset alongside a CNN-LSTM model, significantly boosting the Intrusion Detection System's (IDS) capabilities. The Hurst parameter, which quantifies the self-similarity in a dataset, is instrumental in detecting anomalies. Our indepth analysis of the CICIDS2017 dataset sheds light on contemporary attack patterns and network traffic behaviors. The CNN-LSTM architecture was substantially altered by adding multiple convolutional layers with progressively increasing filters, batch normalization for stable training, and dropout layers for regularization. Principal Component Analysis (PCA) was applied for dimensionality reduction, thereby optimizing the dataset. Test results demonstrate the superior performance of the model incorporating the Hurst parameter, achieving 95.21% accuracy and 82.59% recall, significantly surpassing the standard model. The inclusion of the Hurst parameter marks a substantial advancement in identifying emerging threats, while architectural improvements to the CNN-LSTM model led to more robust and accurate intrusion detection in industrial control settings.

Item Type:	Article (Journal)
Uncontrolled Keywords:	Deep learning, intrusion detection system, supervisory control and data acquisition, self-similarity, Hurst parameter, binary classification
Subjects:	T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK7800 Electronics. Computer engineering. Computer hardware. Photoelectronic devices > TK7885 Computer engineering
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Engineering > Department of Electrical and Computer Engineering
Depositing User:	Dr. Mohamed Hadi Habaebi
Date Deposited:	20 Jan 2025 14:56
Last Modified:	21 Jan 2025 20:28
URI:	http://irep.iium.edu.my/id/eprint/110380

Available Versions of this Item

• Enhanced CNN-LSTM Deep Learning for SCADA IDS Featuring Hurst Parameter Self-Similarity. (deposited UNSPECIFIED)
  • Enhanced CNN-LSTM Deep Learning for SCADA IDS Featuring Hurst Parameter Self-Similarity. (deposited 20 Jan 2025 14:56) [Currently Displayed]

Actions (login required)

View Item