SearcharxivSearch

arXiv subjects

Mehran Tarif

Publications and source records attributed to Mehran Tarif.

7 recordsLinked to original sources

Information-Theoretic Digital Twins for Stealthy Attack Detection in Industrial Control Systems: A Closed-Form KL Divergence Approach

Digital twins (DTs) are increasingly used to monitor and secure Industrial Control Systems (ICS), yet detecting stealthy False Data Injection Attacks (FDIAs) that manipulate system states within normal physical bounds remains challenging. Deep learning anomaly detectors often over-generalize such subtle manipulations, while classical fault detection methods do not scale well in highly correlated multivariate systems. We propose a closed-loop Information-Theoretic Digital Twin (IT-DT) framework for real-time anomaly detection. N4SID identification is combined with steady-state Kalman filtering to quantify residual distribution shifts via closed-form KL divergence, capturing both mean deviations and malicious cross-covariance shifts. Evaluations on the SWaT and WADI datasets show that IT-DT achieves F1-scores of 0.832 and 0.615, respectively, with better precision than deep learning baselines such as TranAD. Computational profiling indicates that the analytical approach requires minimal memory and provides approximately a 600x inference speedup over transformer-based methods on CPU hardware. This makes the framework suitable for resource-constrained industrial edge controllers without GPU acceleration.

cs.CR

Conformal Prediction-Driven Adaptive Sampling for Digital Water Twins

Digital Twins (DTs) for Water Distribution Networks (WDNs) require accurate state estimation with limited sensors. Uniform sampling often wastes resources across nodes with different uncertainty. We propose an adaptive framework combining LSTM forecasting and Conformal Prediction (CP) to estimate node-wise uncertainty and focus sensing on the most uncertain points. Marginal CP is used for its low computational cost, suitable for real-time DTs. Experiments on Hanoi, Net3, and CTOWN show 33--34\% lower demand error than uniform sampling at 40\% coverage and maintain 89.4--90.2\% empirical coverage with only 5--10\% extra computation.

cs.LG

Causal Digital Twins for Cyber-Physical Security: A Framework for Robust Anomaly Detection in Industrial Control Systems

Industrial Control Systems (ICS) in water distribution and treatment face cyber-physical attacks exploiting network and physical vulnerabilities. Current water system anomaly detection methods rely on correlations, yielding high false alarms and poor root cause analysis. We propose a Causal Digital Twin (CDT) framework for water infrastructures, combining causal inference with digital twin modeling. CDT supports association for pattern detection, intervention for system response, and counterfactual analysis for water attack prevention. Evaluated on water-related datasets SWaT, WADI, and HAI, CDT shows 90.8\% compliance with physical constraints and structural Hamming distance 0.133 $\pm$ 0.02. F1-scores are $0.944 \pm 0.014$ (SWaT), $0.902 \pm 0.021$ (WADI), $0.923 \pm 0.018$ (HAI, $p<0.0024$). CDT reduces false positives by 74\%, achieves 78.4\% root cause accuracy, and enables counterfactual defenses reducing attack success by 73.2\%. Real-time performance at 3.2 ms latency ensures safe and interpretable operation for medium-scale water systems.

cs.CR

Semi-Supervised Supply Chain Fraud Detection with Unsupervised Pre-Filtering

Detecting fraud in modern supply chains is a growing challenge, driven by the complexity of global networks and the scarcity of labeled data. Traditional detection methods often struggle with class imbalance and limited supervision, reducing their effectiveness in real-world applications. This paper proposes a novel two-phase learning framework to address these challenges. In the first phase, the Isolation Forest algorithm performs unsupervised anomaly detection to identify potential fraud cases and reduce the volume of data requiring further analysis. In the second phase, a self-training Support Vector Machine (SVM) refines the predictions using both labeled and high-confidence pseudo-labeled samples, enabling robust semi-supervised learning. The proposed method is evaluated on the DataCo Smart Supply Chain Dataset, a comprehensive real-world supply chain dataset with fraud indicators. It achieves an F1-score of 0.817 while maintaining a false positive rate below 3.0%. These results demonstrate the effectiveness and efficiency of combining unsupervised pre-filtering with semi-supervised refinement for supply chain fraud detection under real-world constraints, though we acknowledge limitations regarding concept drift and the need for comparison with deep learning approaches.

cs.LG

A Reinforcement Learning-Based Telematic Routing Protocol for the Internet of Underwater Things

The Internet of Underwater Things (IoUT) has a lot of problems, like low bandwidth, high latency, mobility, and not enough energy. Routing protocols that were made for land-based networks, like RPL, don't work well in these underwater settings. This paper talks about RL-RPL-UA, a new routing protocol that uses reinforcement learning to make things work better in underwater situations. Each node has a small RL agent that picks the best parent node depending on local data such the link quality, buffer level, packet delivery ratio, and remaining energy. RL-RPL-UA works with all standard RPL messages and adds a dynamic objective function to help people make decisions in real time. Aqua-Sim simulations demonstrate that RL-RPL-UA boosts packet delivery by up to 9.2%, uses 14.8% less energy per packet, and adds 80 seconds to the network's lifetime compared to previous approaches. These results show that RL-RPL-UA is a potential and energy-efficient way to route data in underwater networks.

cs.NI

Optimizing RPL Routing Using Tabu Search to Improve Link Stability and Energy Consumption in IoT Networks

In the Internet of Things (IoT) networks, the Routing Protocol for Low-power and Lossy Networks (RPL) is a widely adopted standard due to its efficiency in managing resource-constrained and energy-limited nodes. However, persistent challenges such as high energy consumption, unstable links, and suboptimal routing continue to hinder network performance, affecting both the longevity of the network and the reliability of data transmission. This paper proposes an enhanced RPL routing mechanism by integrating the Tabu Search (TS) optimization algorithm to address these issues. The proposed approach focuses on optimizing the parent and child selection process in the RPL protocol, leveraging a composite cost function that incorporates critical parameters, including Residual Energy, Transmission Energy, Distance to Sink, Hop Count(HC), Expected Transmission Count (ETX), and Link Stability Rate(LSR). Through extensive simulations, we demonstrate that our method significantly improves link stability, reduces energy consumption, and enhances the packet delivery ratio, leading to a more efficient and longer-lasting IoT network. The findings suggest that TS can effectively balance the trade-offs inherent in IoT routing, providing a practical solution for improving the overall performance of RPL-based networks.

cs.NI

A review of Energy Efficient Routing Protocols in Underwater Internet of Things

Oceans, covering 70% of Earth's surface, arelargely unexplored, with about 95% remaining a mystery.Underwater wireless communication is pivotal in various domains,such as real-time aquatic data collection, marine surveillance,disaster prevention, archaeological exploration, andenvironmental monitoring. The Internet of Things has openednew avenues in underwater exploration through the underwaterInternet of Things concept. This innovative technology facilitatessmart ocean research, from small case studies to large-scaleoperations. UIoT networks utilise underwater equipment andsensors to gather and transmit data in aquatic environments.However, the dynamic nature of these environments poseschallenges to the network's structure and communication,necessitating efficient routing solutions. Quality-of-service-awarerouting is vital as it minimises energy usage, extends battery life,and enhances network performance. This paper delves into thechallenges and limitations of UIoT networks, highlighting recentrouting methodologies. It also proposes a comparison frameworkfor routing methods, focusing on the quality of service inunderwater IoT networks, to foster more optimal route selectionand better resource management.

cs.NI