热力发电2024,Vol.53Issue(5) :115-121.DOI:10.19666/j.rlfd.202401014

基于CNN-LSTM-Attention的工业控制系统网络入侵检测方法研究

Research on network intrusion detection method for industrial control system based on CNN-LSTM-Attention

李笛 杨东 王文庆 邓楠轶 刘鹏飞 崔逸群 刘超飞 朱博迪
热力发电2024,Vol.53Issue(5) :115-121.DOI:10.19666/j.rlfd.202401014

基于CNN-LSTM-Attention的工业控制系统网络入侵检测方法研究

Research on network intrusion detection method for industrial control system based on CNN-LSTM-Attention

李笛 1杨东 1王文庆 1邓楠轶 1刘鹏飞 1崔逸群 1刘超飞 1朱博迪1
扫码查看

作者信息

  • 1. 西安热工研究院有限公司,陕西 西安 710054
  • 折叠

摘要

随着各类网络攻击事件的增加,能源电力基础设施中工业控制系统安全问题也逐渐成为人们关注的焦点.结合电力系统的特点,提出一种融合卷积神经网络(convolutional neural network,CNN)、长短时记忆(long short-term memory,LSTM)神经网络和注意力(Attention)机制的CNN-LSTM-Attention网络入侵检测算法模型,通过在实验室仿真环境中构造和采集600 MW燃煤机组制粉系统在3种典型工况下受到网络攻击的运行状态数据集,对所提出的检测算法模型进行训练和评估.结果表明:相较于CNN、LSTM模型,所提出的入侵检测算法模型性能最优;模型准确率、精确率、召回率等评级指标均为最好,综合评价优于其他的入侵检测方法.该入侵检测算法模型具有较强的创新性和实用性.

Abstract

With the increase of various types of cyber-attacks,the security of industrial control systems in energy and power infrastructures has gradually become a focus of attention.Combined with the characteristics of power system,the CNN-LSTM-Attention network intrusion detection algorithm model integrating convolutional neural network(CNN),long and short-term memory(LSTM)neural network and Attention mechanism is proposed.By constructing and collecting the operating state data sets of the pulverizing system of a 600 MW coal-fired unit under three typical operating conditions under cyber-attacks in a laboratory simulation environment,the proposed detection algorithm model is trained and evaluated.The results show that,the proposed intrusion detection algorithm model has the best performance compared with the CNN and LSTM models.The model has the best rating indexes such as accuracy,precision,recall,etc.,and the comprehensive evaluation is better than other intrusion detection methods.The intrusion detection algorithm model is highly innovative and practical.

关键词

工业控制系统/网络入侵检测/CNN/LSTM神经网络/注意力机制

Key words

industrial control system/network intrusion detection/CNN/LSTM neural network/attention mechanism

引用本文复制引用

基金项目

中国华能集团有限公司总部科技项目(HNKJ21-H48)

出版年

2024
热力发电
西安热工研究院有限公司,中国电机工程学会

热力发电

CSTPCD北大核心
影响因子:0.765
ISSN:1002-3364
参考文献量9
段落导航相关论文