Intrusion Detection System Architecture for Cyber-Physical System

Cyber-Physical Systems (CPS) enable the control/monitor of physical process through some form of computational mechanism in the digital world, typically through feedback control. CPS is becoming more popular as it is used in many domains such as smart city, smart health, smart manufacturing, etc. However, their increasing popularity must be followed by addressing one of its important concerns, security. CPS failure in case of attack can impact the physical world, such as the Stuxnet attack that destroyed Iran's nuclear facility. That is why an extra effort is required to ensure protection of CPS from attack. In this paper, we present an Intrusion Detection System (IDS) architecture as IDS is a system that can be utilized to protect CPS. We also evaluate the proposed architecture when implementing it with our testbed CPS. The proposed IDS architecture encompasses the functionality to do data acquisition from CPS to IDS, data analysis to identify attack, response mechanism for detected attack, and system management to manage IDS data and the detector used.