Explainable AI for Process-Aware Attack Detection in Industrial Control Systems

Control System cybersecurity has become an important study area after the occurrence of several mediatic events in the 2010's (Stuxnet, BlackEnergy, Industroyer).Two common characteristics of these attacks are the fact that they were not violating the communication protocols being "stealth" for classical pattern-based detection methods and that they explicitly target the physical process.In this paper we study the performance and explainability of an artificial intelligence based detection system for the detection of such sophisticated attacks.