Detection and isolation of fault from cyber attack in SCADA systems using network parameters

The SCADA system is a vital system that monitors and controls industrial processes. In these systems, a cyber attack occurs by infiltrating the communication channels between sensors, actuators and servers. In recent years, cyber-attacks have created problems for industrial control systems. A cyber attack has a function similar to a fault in terms of system malfunction. Having instantaneous network parameters such as latency, packet loss, and network traffic can probably make the difference between a fault and a cyber attack. The purpose of this initial research is to detect and then isolate the fault from the cyber attack of the SCADA system using different networks. To do this, a fluid passage system with a controller is modeled. A fault detection filter (BFDF) was designed, which detects various anomalies of the system, If at the time of detection of the anomaly by the filter, the network parameters also show abnormal conditions, a cyber attack is detected. The simulations were performed in Omnet ++ software. The research results showed the effectiveness of this method in distinguishing between fault and cyber attack.