融合灰狼优化算法在工控系统入侵检测中的应用

doi:10.11949/0438-1157.20191495

摘要/Abstract

摘要：

针对当前工控系统中数据体量大、维度高的特点，提出了一种融合随机黑洞(random black hole, RBH)策略的灰狼优化(grey wolf optimization integrated random black hole, RBHGWO)算法。该方法在更新下一代灰狼位置时，模拟黑洞的吸引方式，让狼群中的个体能够更快地向着当前全局最优解移动，增强了算法的收敛速度；同时个体以随机策略被黑洞吸引，保持了算法的局部搜索能力。通过优化算法测试函数验证，RBHGWO算法与粒子群优化(particle swarm optimization, PSO)算法、随机黑洞粒子群优化(particle swarm optimization integrated random black hole, RBHPSO)算法、GWO算法和优胜劣汰的灰狼优化(survival of fitness grey wolf optimization, SFGWO)算法进行了实验对比。结果表明，RBHGWO算法具有较快的收敛速度和较好的寻优精度。同时以田纳西-伊斯曼(Tennessee-Eastman, TE)数据集为基础进行仿真实验，结果表明该算法应用于在工控系统入侵检测的特征选择中，其收敛精度、迭代速度以及稳定性都有明显优势。

关键词: 工业控制系统, 入侵检测, 特征选择, 算法, 优化, 模拟

Abstract:

Aiming at the characteristics of large data volume and high dimensions in the current industrial control system, a grey wolf optimization integrated random black hole (RBHGWO) algorithm incorporating a random black hole (RBH) strategy is proposed. When the wolf group updates the position of the next generation grey wolf, the proposed algorithm simulates the attraction of black holes, so that the individual in the wolf group can move faster towards the current global optimal solution, and enhances the convergence speed of the proposed algorithm. Meanwhile, individuals are randomly attracted by black holes, which maintain the local search ability of the proposed algorithm. Compared with particle swarm optimization (PSO), random black hole particle swarm optimization (RBHPSO), GWO algorithm and survival of fitness grey wolf optimization (SFGWO) algorithm using test functions, the experimental results show that the RBHGWO algorithm has fast convergence speed and excellent convergence accuracy. Moreover, based on the data set of Tennessee-Eastman (TE) simulation platform, the situation of industrial control systems is simulated by attacking from the covert intrusion. The experimental results show that the RBHGWO algorithm has obvious advantages in convergence accuracy, iteration speed and stability in the feature selection of intrusion detection of industrial control systems.

Key words: industrial control system, intrusion detection, feature selection, algorithm, optimization, simulation

中图分类号:

TP 29

耿志强, 曾荣甫, 徐圆, 韩永明, 顾祥柏. 融合灰狼优化算法在工控系统入侵检测中的应用[J]. 化工学报, 2020, 71(3): 1080-1087.

Zhiqiang GENG, Rongfu ZENG, Yuan XU, Yongming HAN, Xiangbai GU. Intrusion detection of industrial control system based on grey wolf optimization integrated random black hole[J]. CIESC Journal, 2020, 71(3): 1080-1087.

图/表 11

图1 随机黑洞模型

Fig.1 Random black hole model

表1 测试函数参数表

Table 1 Test function parameter table

函数	名称	变量定义域	维数
f₁	Sphere	[-100,100]	30
f₂	Schwefel’Problem 2.2.2	[-10,10]	30
f₃	Quadratic	[-1.28,1.28]	30
f₄	Rastrigin	[-5.12,5.12]	30
f₅	Ackley	[-32,32]	30
f₆	Griewank	[-600,600]	30

表2 算法参数表

Table 2 Algorithm parameter table

函数	参数
PSO	$c 1$ = 2; $c 2$ =2; $ω$ =0.9
RBHPSO	$c 1$ = 2; $c 2$ = 2; $ω$ = 0.9;p =0.1;R = 0.01
GWO	None
SFGWO	Bound=0.618
RBHGWO	p =0.1;R =0.01

表2 算法参数表

Table 2 Algorithm parameter table

函数	参数
PSO	$c 1$ = 2; $c 2$ =2; $ω$ =0.9
RBHPSO	$c 1$ = 2; $c 2$ = 2; $ω$ = 0.9;p =0.1;R = 0.01
GWO	None
SFGWO	Bound=0.618
RBHGWO	p =0.1;R =0.01

图2 优化函数迭代结果

Fig.2 Iterative results of optimization algorithm

表3 实验结果平均值

Table 3 Average of experimental results

算法	f₁	f₂	f₃	f₄	f₅	f₆
PSO	0.82313	2.3232	0.56841	29.221	12.084	21.476
RBHPSO	0.17903	1.2065	3.2471×10^-3	55.896	3.0695	1.5907×10^-2
GWO	3.7862×10^-22	3.6166×10^-15	1.9252×10^-3	3.1175	2.3667×10^-13	1.9669×10^-3
SFGWO	1.3674×10^-27	1.4859×10^-18	1.2350×10^-3	2.1013	5.9153×10^-14	×10^-11
RBHGWO	1.2212×10^-48	2.4761×10^-29	8.3071×10^-4	0	2.2678×10^-14	0

表4 实验结果标准差

Table 4 Standard deviation of experimental results

算法	f₁	f₂	f₃	f₄	f₅	f₆
PSO	1.1506	0.78267	2.4520	67.834	7.0350	3.8529
RBHPSO	5.7589×10^-2	2.7347	1.8095×10^-3	11.429	0.64447	1.3769×10^-2
GWO	3.5463×10^-22	3.9915×10^-15	1.1116×10^-3	2.1504	6.6311×10^-14	5.2292×10^-3
SFGWO	1.7031×10^-27	1.1864×10^-18	5.9602×10^-4	3.1738	8.1122×10^-15	3.6160×10^-11
RBHGWO	2.7222×10^-48	2.8038×10^-29	7.7627×10^-4	0	5.2557×10^-15	0

图3 TE过程工艺流程图

Fig.3 TE process flow chart

图4 反应器温度变化的过程

Fig.4 Process of reactor temperature change

表5 KNN分类器的实验结果

Table 5 Experimental results of KNN classifier

算法	最优适应度值	最差适应度值	平均适应度值	标准差	运行时间/s
PSO	0.700901	0.583810	0.659407	0.034861	1059.4
RBHPSO	0.750727	0.619167	0.681132	0.027943	1171.6
GWO	0.758889	0.677368	0.739011	0.019231	727.4
SFGWO	0.766481	0.728148	0.743300	0.011645	813.7
RBHGWO	0.774815	0.754815	0.764130	0.006621	692.1

表6 NBC分类器的实验结果

Table 6 Experimental results of NBC classifier

算法	最优适应度值	最差适应度值	平均适应度值	标准差	运行时间/s
PSO	0.727593	0.544355	0.658435	0.051886	144.1
RBHPSO	0.722364	0.607692	0.681142	0.038472	173.5
GWO	0.757778	0.701273	0.741643	0.015378	122.1
SFGWO	0.767407	0.738333	0.752955	0.009589	167.4
RBHGWO	0.785926	0.767222	0.776455	0.006770	121.4

表7 DT分类器的实验结果

Table 7 Experimental results of DT classifier

算法	最优适应度值	最差适应度值	平均适应度值	标准差	运行时间/s
PSO	0.692807	0.583200	0.639045	0.030142	286.5
RBHPSO	0.777658	0.630508	0.693065	0.047811	256.8
GWO	0.801481	0.739107	0.783442	0.017398	214.9
SFGWO	0.806667	0.768519	0.788683	0.012241	372.6
RBHGWO	0.847778	0.820556	0.830486	0.010125	221.9

参考文献 31

1	Serpanos D.Secure and resilient industrial control systems [J].IEEE Design & Test,2018,35(1):90-94.
2	Paridari K,Mahony,Mady A E,et al.A framework for at-tack-resilient industrial control systems: attack detection and controller reconfiguration [J].Proceedings of the IEEE,2018,106(1):113-128.
3	Geng Z Q,Chen N,Han Y,et al.An improved intelligent early warning method based on MWSPCA and its application in complex chemical processes [J].The Canadian Journal of Chemical Engineering，2019，doi.org/0.1002/cjce.23674.
4	Geng Z Q,Liu F F,Han Y M,et al.Fault diagnosis of chemical processes based on a novel adaptive kernel principal component analysis[C]//12th Asian Control Conference.Fukuoka,2019:1495-1500
5	Chung M Y,Ahn W,Min B G,et al.An analytical method for developing appropriate protection profiles of Instrumentation & Control System for nuclear power plants [J].Journal of Supercomputing,2018,74(3):1378-1393.
6	Wu M T,Song Z Y,Moon Y B.Detecting cyber-physical attacks in cyber manufacturing systems with machine learning methods [J].Journal of Intelligent Manufacturing,2019,30(3):1-13.
7	Yılmaz E N,Gönen S.Attack detection/prevention system against cyber-attack in industrial control systems [J].Computers & Security,2018,77:94-105.
8	Li J,Zha Y.CMA: a reconfigurable complex matching accelerator for wire-speed network intrusion detection [J].IEEE Computer Architecture Letters,2018,17(1):33-36.
9	Kasongo S M,Sun Y X.A deep learning method with filter based feature engineering for wireless intrusion detection system [J].IEEE Access,2019,7:38597-38607.
10	Wang N,Du X H,Wang W J.Building a cloud IDS using an efficient feature selection method and SVM [J].IEEE Access,2019,7:1345-1354.
11	Acharya N,Singh S.An IWD-based feature selection method for intrusion detection system [J].Soft Computing,2018,22(13):4407-4416.
12	Zhou T,Lu H L,Wang W W,et al.GA-SVM based feature selection and parameter optimization in hospitalization expense modeling [J].Applied Soft Computing,2019,75:323-332.
13	Tao P Y,Sun Z,Sun Z X.An improved intrusion detection algorithm based on GA and SVM [J].IEEE Access,2018,6:1.
14	Kushwaha N,Pant M.Link based BPSO for feature selection in big data text clustering [J].Future Generation Computer Systems,2018,82:190-199.
15	Kashef S,Nezamabadi-pour H.An advanced ACO algorithm for feature subset selection [J].Neurocomputing,2015,147:271-279.
16	Zawbaa,Hossam M,Emary E,et al.Feature selection approach based on moth-flame optimization algorithm [C]//2016 IEEE Congress on Evolutionary Computation,2015：4612-4617
17	Milan T,Nebojsa B.Improved seeker optimization algorithm hybridized with firefly algorithm for constrained optimization problems [J].Neurocomputing,2014,143:197-207.
18	Mirjalili S,Lewis A.Grey wolf optimizer [J].Advances in Engineering Software,2014,69(3):46-61.
19	Zhou Z Y,Zhang R X,Wang Y M,et al.Color difference classification based on optimization support vector machine of improved grey wolf algorithm [J].Optik,2018,170:17-29.
20	Li S Y,Wang S M,Wang P F,et al.An improved grey wolf optimizer algorithm for the inversion of geoelectrical data [J].Acta Geophysica,2018,66(4):607-621.
21	Wu T B,Gui W H,Yang C H,et al.Improved grey wolf optimization algorithm with logarithm function describing convergence factor and its application [J].Journal of Central South University (Science and Technology),2018,49(4):857-864.
22	Zhang J Q,Liu K,Tan Y,et al.Random black hole particle swarm optimization and its application [C]//2008 International Conference on Neural Net-Works and Signal Processing,2007,1/2:359-365.
23	Ji Z W,Hu M,Yin J X.A survey of feature selection algorithm [J].Electronic Design Engineering,2011,9:46-51.
24	Chen B S,Cheng Y M,Lee C H.A genetic approach to mixed H₂/H_∞ optimal PID control [J].IEEE Control Systems,1995,15(5):51-60.
25	Downs J J,Vogel E F.A plant-wide industrial process control problem [J].Computers and Chemical Engineering,1993,17(3):245-255.
26	Ricker N L.Tennessee Eastman challenge archive [EB/OL]. [2017-05-31]. http: //depts.washington.edu/control/LARRY/TE/download.html.
27	Ricker N L.Decentralized control of the Tennessee Eastman challenge process [J].Journal of Process Control,1996,6(4):205-221.
28	Lv X F,Xie Y B.An anomaly detection method for industrial control systemsvia state transition graph [J].Acta Automatica Sinica,2018,44(9):1662-1671.
29	Peterson L.K-nearest neighbor [J].Scholarpedia,2009,4(2):1883.
30	Langley P,Thompson K.An analysis of Bayesian classifiers [C]//Proceedings of the 10th National Conference on Artificial Intelligence,San Jose, CA,1992:223-228.
31	Breiman L,Friedman J,Olshen R.Classification and Regression Trees [M].California:Wadsworth Belement,1984.

[1]	杨欣, 王文, 徐凯, 马凡华. 高压氢气加注过程中温度特征仿真分析[J]. 化工学报, 2023, 74(S1): 280-286.
[2]	宋嘉豪, 王文. 斯特林发动机与高温热管耦合运行特性研究[J]. 化工学报, 2023, 74(S1): 287-294.
[3]	张思雨, 殷勇高, 贾鹏琦, 叶威. 双U型地埋管群跨季节蓄热特性研究[J]. 化工学报, 2023, 74(S1): 295-301.
[4]	叶展羽, 山訸, 徐震原. 用于太阳能蒸发的折纸式蒸发器性能仿真[J]. 化工学报, 2023, 74(S1): 132-140.
[5]	张龙, 宋孟杰, 邵苛苛, 张旋, 沈俊, 高润淼, 甄泽康, 江正勇. 管翅式换热器迎风侧翅片末端霜层生长模拟研究[J]. 化工学报, 2023, 74(S1): 179-182.
[6]	张义飞, 刘舫辰, 张双星, 杜文静. 超临界二氧化碳用印刷电路板式换热器性能分析[J]. 化工学报, 2023, 74(S1): 183-190.
[7]	王志国, 薛孟, 董芋双, 张田震, 秦晓凯, 韩强. 基于裂隙粗糙性表征方法的地热岩体热流耦合数值模拟与分析[J]. 化工学报, 2023, 74(S1): 223-234.
[8]	何松, 刘乔迈, 谢广烁, 王斯民, 肖娟. 高浓度水煤浆管道气膜减阻两相流模拟及代理辅助优化[J]. 化工学报, 2023, 74(9): 3766-3774.
[9]	刘远超, 关斌, 钟建斌, 徐一帆, 蒋旭浩, 李耑. 单层XSe₂（X=Zr/Hf）的热电输运特性研究[J]. 化工学报, 2023, 74(9): 3968-3978.
[10]	陈哲文, 魏俊杰, 张玉明. 超临界水煤气化耦合SOFC发电系统集成及其能量转化机制[J]. 化工学报, 2023, 74(9): 3888-3902.
[11]	宋明昊, 赵霏, 刘淑晴, 李国选, 杨声, 雷志刚. 离子液体脱除模拟油中挥发酚的多尺度模拟与研究[J]. 化工学报, 2023, 74(9): 3654-3664.
[12]	曹跃, 余冲, 李智, 杨明磊. 工业数据驱动的加氢裂化装置多工况切换过渡状态检测[J]. 化工学报, 2023, 74(9): 3841-3854.
[13]	胡建波, 刘洪超, 胡齐, 黄美英, 宋先雨, 赵双良. 有机笼跨细胞膜易位行为的分子动力学模拟研究[J]. 化工学报, 2023, 74(9): 3756-3765.
[14]	赵佳佳, 田世祥, 李鹏, 谢洪高. SiO₂-H₂O纳米流体强化煤尘润湿性的微观机理研究[J]. 化工学报, 2023, 74(9): 3931-3945.
[15]	齐聪, 丁子, 余杰, 汤茂清, 梁林. 基于选择吸收纳米薄膜的太阳能温差发电特性研究[J]. 化工学报, 2023, 74(9): 3921-3930.