- The model is a multi-class XGBoost classifier that predicts each event on a power system based on dataset features.
-
https://sites.google.com/a/uah.edu/tommy-morris-uah/ics-data-sets
-
http://www.ece.uah.edu/~thm0009/icsdatasets/PowerSystem_Dataset_README.pdf
-
Morris, T., Thornton, Z., Turnipseed, I., Industrial Control System Simulation and Data Logging for Intrusion Detection System Research. 7th Annual Southeastern Cyber Security Summit. Huntsvile, AL. June 3 - 4, 2015.
-
Beaver, Justin M., Borges-Hink, Raymond C., Buckner, Mark A., "An Evaluation of Machine Learning Methods to Detect Malicious SCADA Communications," in the Proceedings of 2013 12th International Conference on Machine Learning and Applications (ICMLA), vol.2, pp.54-59, 2013. doi: 10.1109/ICMLA.2013.105 http://www.google.com/url?q=http%3A%2F%2Fieeexplore.ieee.org%2Fstamp%2Fstamp.jsp%3Ftp%3D%26arnumber%3D6786081%26isnumber%3D6786067&sa=D&sntz=1&usg=AOvVaw2358QIW3gbS8nsykJ3DFgl
Architecture Type:
- Gradient Boosting
Network Architecture:
- XGBOOST
Input Format:
- Tabular format in which the dataset features contain synchrophasor measurements and data logs from Snort, a simulated control panel, and relays.
Input Parameters:
- N/A
Other Properties Related to Output:
- N/A
Output Format:
- Natural Events, No Events or Attack Events
Output Parameters:
- N/A
Other Properties Related to Output:
- N/A
- Requirements can be installed with
pip install -r requirements.txt
- and for
p7zip
apt update
apt install p7zip-full p7zip-rar
Runtime(s):
- Morpheus
Supported Hardware Platform(s):
- Ampere/Turing
Supported Operating System(s):
- Linux
- v1
Link:
Properties (Quantity, Dataset Descriptions, Sensor(s)):
- There are 78377 rows in the dataset.
Dataset License:
Link:
Properties (Quantity, Dataset Descriptions, Sensor(s)):
- There are 78377 rows in the dataset.
Dataset License:
Engine:
- Triton
Test Hardware:
- Other
- Not Applicable
- Not Applicable
- Not Applicable
- Not Applicable
- Not Applicable
- Not Applicable
- Not Applicable
- Not Applicable
- Not Applicable
- Not Applicable
Individuals from the following adversely impacted (protected classes) groups participate in model design and testing.
- Not Applicable
- Not Applicable
- It's primarily for testing purposes Natural Events, No Events and Attack Events can be detected in an Industrial Control System
- This model is intended for developers who want to test the model that can detect different events in the example Operational Technologies dataset.
- This model is intended for users who want to test with models that can differentiate Natural Events, No Events and Attack Events.
- This model outputs one of these results: Natural Events, No Events and Attack Events
- An XGBoost model gets trained with the dataset, and in inference, the model predicts one of the multiple classes for each row.
Name the adversely impacted groups (protected classes) this has been tested to deliver comparable outcomes regardless of:
- Not Applicable
- Further training is needed for different data types.
- F1
- N/A
- None
- No
- N/A
- No
- Industrial Control System (ICS) Cyber Attack Detection
- Different models need to be trained for different types of data
- No
- N/A
- No
- No
- No
- No
- No
- Neither
- N/A
Protected classes used to create this model? (The following were used in model the model's training:)
- N/A
- Unknown
- N/A
- N/A
- N/A
- No
- Yes
- N/A
Is data compliant with data subject requests for data correction or removal, if such a request was made?
- N/A