Enhancing Attack Detection Capabilities in BACnet/IP Networks Using Machine-Learning Models

arXiv:2607.20686 · cs.CR · Submitted 2026-07-22 · Read on arXiv

Derek Manzella, John D. Hastings

cs.CR

Submitted: 2026-07-22

Comments: 9 pages, 2 figures, 4 tables

Code: https://github.com/cisagov/icsnpp-bacnet

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

F1 Score — 12× in this paper · explained in 3 episodes
Feature Engineering — 7× in this paper · explained in 3 episodes
Building Automation Systems — 6× in this paper
Core — 5× in this paper · explained in 2 episodes
Accuracy — 4× in this paper · explained in 1 episode
Denial of Service — 3× in this paper
Industrial Control Systems — 3× in this paper
BACnet Virtual Link Control — 2× in this paper
Actor — 1× in this paper · explained in 3 episodes
Aggregation — 1× in this paper · explained in 1 episode
Analyzer — 1× in this paper · explained in 1 episode
Application-layer Protocol Data Unit — 1× in this paper
Fine-Tuning — 1× in this paper · explained in 5 episodes
Internet of Things — 1× in this paper
Network-layer Protocol Data Unit — 1× in this paper
Redundancy — 1× in this paper · explained in 2 episodes
Unified Framework — 1× in this paper · explained in 5 episodes

Related papers