Machine Learning for Cyber-Attack Identification from Traffic Flows

Yujing Zhou, Marc L. Jacquet, Robel Dawit, Skyler Fabre, Dev Sarawat +7 more
5/2/2025
cs.LGcs.CR

No official code found. Best implementation: U1overground/Cybersummer (0 stars, last commit 2025-03-28).

Abstract

This paper presents our simulation of cyber-attacks and detection strategies on the traffic control system in Daytona Beach, FL. using Raspberry Pi virtual machines and the OPNSense firewall, along with traffic dynamics from SUMO and exploitation via the Metasploit framework. We try to answer the research questions: are we able to identify cyber attacks by only analyzing traffic flow patterns. In this research, the cyber attacks are focused particularly when lights are randomly turned all green or red at busy intersections by adversarial attackers. Despite challenges stemming from imbalanced data and overlapping traffic patterns, our best model shows 85\% accuracy when detecting intrusions purely using traffic flow statistics. Key indicators for successful detection included occupancy, jam length, and halting durations.

View on arXivView PDF

Code Implementations(1)

00Jupyter NotebookMar 28, 20251 years ago

Similar Papers

Cite this paper

@article{zhou2025machine,
  title  = {Machine Learning for Cyber-Attack Identification from Traffic Flows},
  author = {Yujing Zhou and Marc L. Jacquet and Robel Dawit and Skyler Fabre and Dev Sarawat and Faheem Khan and Madison Newell and Yongxin Liu and Dahai Liu and Hongyun Chen and Jian Wang and Huihui Wang},
  year   = {2025},
  eprint = {2505.01489},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2505.01489v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2505.01489.svg)](https://codeofpaper.com/paper/2505.01489)

Discussion