Hybrid Cloud-Edge Collaborative Data Anomaly Detection in Industrial
  Sensor Networks
  Industrial control systems (ICSs) are facing increasing cyber-physical
attacks that can cause catastrophes in the physical system. Efficient anomaly
detection models in the industrial sensor networks are essential for enhancing
ICS reliability and security, due to the sensor data is related to the
operational state of the ICS. Considering the limited availability of computing
resources, this paper proposes a hybrid anomaly detection approach in
cloud-edge collaboration industrial sensor networks. The hybrid approach
consists of sensor data detection models deployed at the edges and a sensor
data analysis model deployed in the cloud. The sensor data detection model
based on Gaussian and Bayesian algorithms can detect the anomalous sensor data
in real-time and upload them to the cloud for further analysis, filtering the
normal sensor data and reducing traffic load. The sensor data analysis model
based on Graph convolutional network, Residual algorithm and Long short-term
memory network (GCRL) can effectively extract the spatial and temporal features
and then identify the attack precisely. The proposed hybrid anomaly detection
approach is evaluated using a benchmark dataset and baseline anomaly detection
models. The experimental results show that the proposed approach can achieve an
overall 11.19% increase in Recall and an impressive 14.29% improvement in
F1-score, compared with the existing models.
