跨域自适应检测机器人系统异常,无需标注数据
Securing Swarms: Cross-Domain Adaptation for ROS2-based CPS Anomaly Detection
- 用领域自适应迁移网络攻击知识到多层机器人系统
- 在真实混合数据集上实现跨环境检测准确率提升
- 适合安全研究人员和工业级系统防护开发者
网络物理系统(CPS)正被广泛应用于关键场景,其融合感知与计算单元,具备多层架构(网络、计算、物理接口),但这也使其比纯网络系统更易受攻击,且攻击后果严重。现有入侵检测系统(IDS)多基于仅含网络流量的数据集训练,忽略了其他系统层级的攻击。为此,本文提出一种可适配的CPS异常检测模型,无需预先标注数据即可识别攻击。通过领域自适应技术,将仅含网络流量环境中的已知攻击知识迁移到包含网络、操作系统(OS)及机器人操作系统(ROS)的完整CPS环境。我们在一个先进的混合数据集上验证方法,该数据集整合了网络、操作系统与ROS数据。实验表明,该模型在不同攻击类型下均表现优异,显著优于现有异常检测方法。
原文摘要 · Abstract (English)
Cyber-physical systems (CPS) are being increasingly utilized for critical applications. CPS combines sensing and computing elements, often having multi-layer designs with networking, computational, and physical interfaces, which provide them with enhanced capabilities for a variety of application scenarios. However, the combination of physical and computational elements also makes CPS more vulnerable to attacks compared to network-only systems, and the resulting impacts of CPS attacks can be substantial. Intelligent intrusion detection systems (IDS) are an effective mechanism by which CPS can be secured, but the majority of current solutions often train and validate on network traffic-only datasets, ignoring the distinct attacks that may occur on other system layers. In order to address this, we develop an adaptable CPS anomaly detection model that can detect attacks within CPS without the need for previously labeled data. To achieve this, we utilize domain adaptation techniques that allow us to transfer known attack knowledge from a network traffic-only environment to a CPS environment. We validate our approach using a state-of-the-art CPS intrusion dataset that combines network, operating system (OS), and Robot Operating System (ROS) data. Through this dataset, we are able to demonstrate the effectiveness of our model across network traffic-only and CPS environments with distinct attack types and its ability to outperform other anomaly detection methods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。