AMR.ALFAYOUMY
← HOME / PROJECTS / SWAT CYBER-PHYSICAL SECURITY DETECTION
RESEARCH · 2023-2024 · Deep learning for industrial security

SWaT Cyber-Physical Security Detection.

Data Scientist & AI/ML Engineer
Cairo, Egypt
Source: resume + original portfolio + LinkedIn

A research project on the Secure Water Treatment dataset combining time-series forecasting, binary attack detection, and attack-point identification for industrial control systems.

Pipelines
2
Forecasting and supervised detection
Architectures
5+
Benchmarked models
Focus
real time
Operational detection framing
// 02 — CHALLENGE
WHY IT MATTERED

Cyber-physical systems require temporal understanding, not just static classification. The model has to capture process behavior over time and identify when that behavior stops making sense.

The project also needed to bridge anomaly detection and interpretable attack localization.

// 03 — APPROACH
HOW I BUILT IT

I worked on two complementary tracks: forecasting-based anomaly detection for deviations from normal behavior, and supervised classification for direct attack recognition.

The evaluation compared multiple recurrent and hybrid architectures to understand which trade-offs best fit the SWaT environment.

// 04 — HIGHLIGHTS
KEY TAKEAWAYS
  • Benchmarked BiGRU, BiLSTM, and LSTM forecasting models
  • Built normal-vs-attack classification and attack-point labeling pipelines
  • Combined spatial and temporal modeling with CNN-LSTM and MLP architectures
  • Focused on real-time detection logic for operational environments
// 05 — OUTCOMES
RESULTS AND LESSONS
  • Identified stronger-performing sequential models for the forecasting task.
  • Built a fuller security-monitoring view by pairing anomaly detection with attack-point classification.
  • Strengthened my foundation in multivariate time-series security modeling.
// 06 — STACK
THE TOOLS
Models
BiGRUBiLSTMLSTMCNN-LSTMMLP
Tools
PythonTensorFlowPandasNumPyMatplotlib
Domain
ICS securityTime seriesAnomaly detection