Mathematical analysis

Materials science

Sequence (biology)

Internet of Things

Artificial intelligence

Composite material

Transformer

Constant false alarm rate

Deep learning

Physics

Industrial Internet

Mathematics

Industrial control system

Biology

Quantum mechanics

Operating system

Recurrent neural network

Voltage

Computer science

Control (management)

Scheme (mathematics)

Encoder

Long short term memory

False alarm

ALARM

Computer security

Artificial neural network

Genetics

IEEE Communications Magazine

The Industrial Internet of Things (IIoT) is a physical information system developed based on traditional industrial control networks. As one of the most critical infrastructure systems, IIoT is also a preferred target for adversaries engaged in advanced persistent threats (APTs). To address this issue, we explore a deep-learning-based proactive APT detection scheme in IIoT. In this scheme, considering the characteristics of long attack sequences and long-term continuous APT attacks, our solution adopts a well-known deep learning model, bidirectional encoder representations from transformers (BERT), to detect APT attack sequences. The APT attack sequence is also optimized to ensure the model's long-term sequence judgment effectiveness. The experimental results not only show that the proposed deep learning method has feasibility and effectiveness for APT detection, but also certify that the BERT model has better accuracy and a lower false alarm rate when detecting APT attack sequences than other time series models.

Securing Critical Infrastructures: Deep-Learning-Based Threat Detection in IIoT