Skip to main content
Kent Academic Repository

Non-IP Industrial Networks: An Agnostic Anomaly Detection System

Moura, Ralf Luis de, Franqueira, Virginia N. L., Pessin, Gustavo (2022) Non-IP Industrial Networks: An Agnostic Anomaly Detection System. In: Anais do Xxiv Congresso Brasileiro de Automática – CBA 2022. . Brazilian Society of Automatic (SBA), Brazil (KAR id:97938)


This paper describes a system to detect anomalies in non-IP (Internet Protocol) industrial networks on Industrial Control Systems (ICS). Non-IP industrial networks are widely applied in ICS to connect sensors and actuators to control systems or business networks. They were designed to be in an air-gapped security environment and therefore contain almost no cyber security features and are vulnerable to various attacks. Even though they are part of the communication layers, a few external cyber security controls are applied in this crucial tier. As an extension of the work by De Moura et al. (2021), this study proposes and tests the proof-of-concept of an agnostic anomaly detection system (AADS) to detect anomalies on any non-IP industrial network (e.g., DeviceNet, CANBus) as an additional cyber security measure working at the physical network layer. The proof-of-concept is comprised of three modules, including hardware and software components: data gathering (sniffer), parser, and detection. Testing the proof-of-concept in an industrial lab network (i.e., a Profibus-DP lab network) showed the proposal's feasibility with a detection rate above 99% (overall accuracy: 99.59%; F1-Score: 99.18%).

Item Type: Conference or workshop item (Proceeding)
Uncontrolled keywords: Anomaly Detection Systems, Non-IP Industrial Networks, Cyber Security, Industrial Control Systems
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming, > QA76.76.E95 Expert Systems (Intelligent Knowledge Based Systems)
Divisions: Divisions > Division of Computing, Engineering and Mathematical Sciences > School of Computing
University-wide institutes > Institute of Cyber Security for Society
Depositing User: Virginia Franqueira
Date Deposited: 11 Nov 2022 21:07 UTC
Last Modified: 08 Jun 2023 08:47 UTC
Resource URI: (The current URI for this page, for reference purposes)

University of Kent Author Information

Franqueira, Virginia N. L..

Creator's ORCID:
CReDIT Contributor Roles:
  • Depositors only (login required):

Total unique views for this document in KAR since July 2020. For more details click on the image.