CBAT-ASG: Adversarial Sample Generation Method Based on CBA-Transformer

In recent years, machine learning models have become prevalent for anomaly detection in industrial control systems (ICS). However, their vulnerability to adversarial samples poses a significant security threat. Current methods for adversarial sample attacks in ICS are inadequate, requiring urgent research. Present adversarial samples mainly target machine learning-based anomaly detection models, overlooking invariant rule detectors in ICS, which reduces attack success rates. This paper introduces CBAT-ASG, a novel adversarial sample generation method based on CBA-Transformer. We enhance the Transformer with channel and spatial attention modules, creating the CBA-Transformer generative model. This model improves performance and generates initial adversarial samples that better match industrial control data. To avoid detection by invariant rule detectors, we use an invariant rule checker to refine adversarial samples, increasing their resistance to detection. Experiments on public datasets show CBAT-ASG significantly reduces the detection capabilities of the advanced anomaly detection model GDN, with Precision decreasing by 0.94, and Recall and F1-Score dropping by over 0.4. Comparisons with three state-of-the-art adversarial sample generation methods across four anomaly detection models show CBAT-ASG's attack efficacy is approximately 0.7 higher in the best-case scenario.