Learning method and system for separating independent and dependent attacks

Mestha, Lalit Keshav; Abbaszadeh, Masoud; Giani, Annartia

Title: Learning method and system for separating independent and dependent attacks

Patent · Tue Sep 22 00:00:00 EDT 2020

OSTI ID:1735308

Mestha, Lalit Keshav; Abbaszadeh, Masoud; Giani, Annartia

Streams of monitoring node signal values over time, representing a current operation of the industrial asset, are used to generate current monitoring node feature vectors. Each feature vector is compared with a corresponding decision boundary separating normal from abnormal states. When a first monitoring node passes a corresponding decision boundary, an attack is detected and classified as an independent attack. When a second monitoring node passes a decision boundary, an attack is detected and a first decision is generated based on a first set of inputs indicating if the attack is independent/dependent. From the beginning of the attack on the second monitoring node until a final time, the first decision is updated as new signal values are received for the second monitoring node. When the final time is reached, a second decision is generated based on a second set of inputs indicating if the attack is independent/dependent.

View Patent

Cite

Export

Save

Research Organization:: General Electric Co., Schenectady, NY (United States)

Sponsoring Organization:: USDOE

DOE Contract Number:: OE0000833

Assignee:: General Electric Company (Schenectady, NY)

Patent Number(s):: 10,785,237

Application Number:: 15/977,558

OSTI ID:: 1735308

Resource Relation:: Patent File Date: 05/11/2018

Country of Publication:: United States

Language:: English

References (51)

Adaptive control architectures for mitigating sensor attacks in cyber-physical systems Yucelen, Tansel; Haddad, Wassim M.; Feron, Eric M. Cyber-Physical Systems, Vol. 2, Issue 1-4 https://doi.org/10.1080/23335777.2016.1244562	journal	May 2016
Intelligent Cyberphysical Intrusion Detection and Prevention Systems and Methods for Industrial Control Systems Dixit, Paritosh; Thanos, Daniel https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20140283047 US Patent Application 13/801496; 20140283047	patent-application	September 2014
Efficient Localization of Transmitters Within Complex Electromagnetic Environments Baxley, Robert John; Altman, Justin Trent https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20160127931 US Patent Application 14/928974; 20160127931	patent-application	May 2016
Ineffective network equipment identification Kallos, George https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170142133 US Patent Application 15/319970; 20170142133	patent-application	May 2017
Industrial Control System Smart Hardware Monitoring Gendelman, Ilan https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20150346706 US Patent Application 14/718192; 20150346706	patent-application	December 2015
Method of artificial nueral network loadflow computation for electrical power system Patel, Sureshchandra B. https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/8756047 US Patent Document 8,756,047	patent	June 2014
Cyber security Ferguson, Matt; Kadirkamanathan, Maha https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170230391 US Patent Application 15/425903; 20170230391	patent-application	August 2017
Threat detection for a fleet of industrial assets Holzhauer, Daniel Francis; Abbaszadeh, Masoud; Mestha, Lalit Keshav https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/10476902 US Patent Document 10,476,902	patent	November 2019
Method for Mitigation of Cyber Attacks on Industrial Control Systems Schneider, Omer; Giller, Nir https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170054751 US Patent Application 14/830776; 20170054751	patent-application	February 2017
Automated attack localization and detection Abbaszadeh, Masoud; Mestha, Lalit Keshav; Bushey, Cody Joe https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/10417415 US Patent Document 10,417,415	patent	September 2019
System and methods for adaptive model generation for detecting intrusion in computer systems Honig, Andrew; Howard, Andrew; Eskin, Eleazar https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170034187 US Patent Application 15/291218; 20170034187	patent-application	February 2017
Autonomous sensor system with intrinsic asymmetric encryption Wishard, Bernard https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170085539 US Patent Application 15/272589; 20170085539	patent-application	March 2017
Cyber signal isolator Park, Daniel D.; Baggett, John Mark; Suhler, Edward C. https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/10205733 US Patent Document 10,205,733	patent	February 2019
Pattern Detection in Sensor Networks Paffenroth, Randy; Du Toit, Philip; Scharf, Louis https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20160156652 US Patent Application 13/564335; 20160156652	patent-application	June 2016
Multi-Layer Aggregation for Object Detection Nguyen, Hien; Singh, Vivek KUmar; Zheng, Yefeng https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20160048741 US Patent Application 14/457381; 20160048741	patent-application	February 2016
System and Method for Providing Monitoring of Industrial Equipment Craig, Jason; Pugh, William; Albarran, Richard Daniel https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20140244192 US Patent Application 13/776407; 20140244192	patent-application	August 2014
Edge-based machine learning for encoding legitimate scanning Vasseur, Jean-Philippe; Mermoud, Gregory; Savalle, Pierre-Andre https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170279833 US Patent Application 15/205732; 20170279833	patent-application	September 2017
System and Method for Logging Security Events for an Industrial Control System Chong, Justin Brandon; Socky, David Richard; Sahoo, Manas Ranjan https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20130291115 US Patent Application 13/460779; 20130291115	patent-application	October 2013
Cluster-based decision boundaries for threat detection in industrial asset control system Abbaszadeh, Masoud; Bushey, Cody Joe; Mestha, Lalit Keshav https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20180191758 US Patent Application 15/397062; 20180191758	patent-application	July 2018
Apparatus and method for detecting an abnormality sign in a control system Heo, Youngjun; Sohn, Seon-Gyoung; Kang, Dong Ho https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20140298399 US Patent Application 13/927794; 20140298399	patent-application	October 2014
Probabilistic Model For Cyber Risk Forecasting Schultz, Craig A.; Nitao, John J.; Starr, Jeffrey M. https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20150381649 US Patent Application 14/319994; 20150381649	patent-application	December 2015
System and Method for Maintaining the Health of a Control System T., Rvia Kumar; Banerjee, Goutam; Pai, Ramesh Brahmavar https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20160033941 US Patent Application 14/448164; 20160033941	patent-application	February 2016
Digital information infrastructure and method for security designated data and with granular data stores Redlich, Ron M.; Nemzow, Martin A. https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/8468244 US Patent Document 8,468,244	patent	June 2013
Automated Attack Localization and Detection Abbaszadeh, Masoud; Mestha, Lalit Keshav; Bushey, Cody https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20180157831 US Patent Application 15/478425; 20180157831	patent-application	June 2018
Classifying Data with Deep Learning Neural Records Incrementally Refined Through Expert Input Williams, Jr., David Russell; Gutzwiller, Luke Robert; Hazen, Megan Ursula https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20150254555 US Patent Application 14/639005; 20150254555	patent-application	September 2015
Parsimonious continuous-space phrase representations for natural language processing Bellegarda, Jerome R. https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20160307566 US Patent Application 14/838323; 20160307566	patent-application	October 2016
Forecasting and classifying cyber-attacks using neural embeddings based on pattern of life data Ahmed, Mohamed N.; Baughman, Aaron K.; Behnken, John F. https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170230401 US Patent Application 15/019300; 20170230401	patent-application	August 2017
Intelligent cyberphysical intrusion detection and prevention systems and methods for industrial control systems Dixit, Paritosh; Thanos, Daniel https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/9405900 US Patent Document 9,405,900	patent	August 2016
Method for Quantitative Resilience Estimation of Industrial Control Systems Wei, Dong; Ji, Kun https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20130132149 US Patent Application 13/703158; 20130132149	patent-application	May 2013
Threat Detection and Localizatino for Monitoring Nodes of an Industrial Asset Control System Bushey, Cody Joe; Mestha, Lalit Keshav; Holzhauer, Daniel Francis https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20170359366 US Patent Application 15/179034; 20170359366	patent-application	December 2017
System and Method for Detecting a Cyber-Attack at SCADA/ICS Managed Plants Arov, Michael; Ochman, Ronen; Cohen, Moshe https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20180276375 US Patent Application 15/989748; 20180276375	patent-application	September 2018
System and method for improved production surveillance using visual pattern recognition in oil and gas upstream Rajaram, Venkatakrishnan; Kumar, Hemant https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20160341636 US Patent Application 14/794424; 20160341636	patent-application	November 2016
Method and system for profiling network flows at a measurement point within a computer network Malan, Gerald R.; Jahanian, Farnam https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20020032717 US Patent Application 09/855809; 20020032717	patent-application	March 2002
Semi-Automatic System with an Iterative Learning Method for Uncovering the Leading Indicators in Business Processes Peng, Wei; Rose, Philip C.; Sun, Tong https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20080201397 US Patent Application 11/676816; 20080201397	patent-application	August 2008
Multi-mode boundary selection for threat detection in industrial asset control system Holzhauer, Daniel Francis; Bushey, Cody Joe; Mestha, Lalit Keshav https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/10397257 US Patent Document 10,397,257	patent	August 2019
Systems and methods for providing off-line decision support for correlation analysis Grabarnik, Genady; Hellerstein, Joseph L.; Ma, Sheng https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20030074439 US Patent Application 09/976540; 20030074439	patent-application	April 2003
Dynamic normalization of monitoring node data for threat detection in industrial asset control system Mestha, Lalit Keshav; Bushey, Cody Joe; Holzhauer, Daniel Francis https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20180137277 US Patent Application 15/351809; 20180137277	patent-application	May 2018
Method and System for Unified Information Representation and Applications Thereof Solmer, Robert; Ruan, Wen https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20120233127 US Patent Application 13/044763; 20120233127	patent-application	September 2012
Feature and boundary tuning for threat detection in industrial asset control system Bushey, Cody Joe; Mestha, Lalit Keshav; John, Justin Varkey https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/10204226 US Patent Document 10,204,226	patent	February 2019
Anomaly Detection for Context-Dependent Data Bauer, Alexander; Heidtke, Nico; Niessen, Maria https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20160328654 US Patent Application 14/703502; 20160328654	patent-application	November 2016
Apparatus and method for analyzing and correlating events in a system using a causality matrix Yemini, Yechiam; Yemini, Shaula; Kliger, Shmuel https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/5661668 US Patent Document 5,661,668	patent	August 1997
Distributed Estimation and Detection of Anomalies in Control Systems Sun, Hongbo; Minot, Ariana https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20180115561 US Patent Application 15/298392; 20180115561	patent-application	April 2018
Gas turbine and steam turbine combined cycle electric power generating plant having a coordinated and hybridized control system and an improved factory based method for making and testing combined cycle and other power plants and control systems therefor Martz, Lyle F.; Kiscaden, Roy W.; Uram, Robert https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/4455614 US Patent Document 4,455,614	patent	June 1984
Differential Acoustic Model Representation and Linear Transform-Based Adaptation for Efficient User Profile Update Techniques in Automatic Speech Recognition Gollan, Christian; Willett, Daniel https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20150149174 US Patent Application 14/399867; 20150149174	patent-application	May 2015
Connection based denial of service detection Dudfield, Anne Elizabeth; Poletto, Massimiliano Antonio https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/8191136 US Patent Document 8,191,136	patent	May 2012
Systems and methods for secure operation of an industrial controller Chong, Justin Brandon; Socky, David Richard; Thakur, Pavan Kumar Singh https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/8973124 US Patent Document 8,973,124	patent	March 2015
System and Method for Distributed Denial of Service Identification and Prevention Liu, Lei https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20140223562 US Patent Application 13/953457; 20140223562	patent-application	August 2014
Systems and methods for cyber-attack detection at sample speed Mestha, Lalit Keshav; John, Justin Varkey; Yan, Weizhong https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20180159879 US Patent Application 15/484282; 20180159879	patent-application	June 2018
Multi-mode boundary selection for threat detection in industrial asset control system Holzhauer, Daniel Francis; Bushey, Cody Joe; Mestha, Lalit Keshav https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20180159877 US Patent Application 15/371723; 20180159877	patent-application	June 2018
Systems and methods for cyber-attack detection at sample speed Mestha, Lalit Keshav; John, Justin Varkey; Yan, Weizhong https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/10594712 US Patent Document 10,594,712	patent	March 2020
Sequential data examination method Oka, Mizuki; Kato, Kazuhiko https://doi.org/https://image-ppubs.uspto.gov/dirsearch-public/print/downloadPdf/20060069955 US Patent Application 11/179838; 20060069955	patent-application	March 2006

Similar Records

Dynamic concurrent learning method to neutralize cyber attacks and faults for industrial asset monitoring nodes

Patent · Tue Jul 28 00:00:00 EDT 2020 · OSTI ID:1735308

Mestha, Lalit Keshav; Anubi, Olugbenga; Achanta, Hema Kumari

Reliable cyber-threat detection in rapidly changing environments

Patent · Tue Oct 27 00:00:00 EDT 2020 · OSTI ID:1735308

Abbaszadeh, Masoud; Mestha, Lalit Keshav

Cyber-attack detection, localization, and neutralization for unmanned aerial vehicles

Patent · Tue Feb 23 00:00:00 EST 2021 · OSTI ID:1735308

Mestha, Lalit Keshav; Anubi, Olugbenga; John, Justin Varkey

Related Subjects

97 MATHEMATICS AND COMPUTING

Title: Learning method and system for separating independent and dependent attacks

Citation Formats

References (51)

Similar Records

Related Subjects