<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">14</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/v8z1-3b2n-z84u</article-id>
      <title-group>
        <article-title>Detection of computer attacks in networks of industrial Internet of Things based on the computing model of hierarchical temporary memory</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Обнаружение компьютерных атак в сетях промышленного Интернета вещей на основе вычислительной модели иерархической временной памяти</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Markov</surname>
            <given-names>Georgy</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-2264-7513</contrib-id>
          <name>
            <surname>Krundyshev</surname>
            <given-names>Vasiliy</given-names>
          </name>
          <xref ref-type="aff" rid="aff2"/>
          <email>krundyshev_vm@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-9732-0099</contrib-id>
          <name>
            <surname>Kalinin</surname>
            <given-names>Maxim</given-names>
          </name>
          <xref ref-type="aff" rid="aff2"/>
          <email>max@ibks.spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-0232-7248</contrib-id>
          <contrib-id contrib-id-type="scopus">13103571000</contrib-id>
          <name>
            <surname>Zegzhda</surname>
            <given-names>Dmitry</given-names>
          </name>
          <xref ref-type="aff" rid="aff2"/>
          <email>zegzhda_dp@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-8627-4947</contrib-id>
          <name>
            <surname>Busygin</surname>
            <given-names>Alexey</given-names>
          </name>
          <xref ref-type="aff" rid="aff2"/>
          <email>a.busygin@ibks.spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Jet Infosystems</aff>
      <aff id="aff2">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2023-06-08">
        <day>08</day>
        <month>06</month>
        <year>2023</year>
      </pub-date>
      <issue>2</issue>
      <fpage>163</fpage>
      <lpage>172</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/2023_2.pdf"/>
      <abstract xml:lang="en">
        <p>This paper discusses the problem of detecting network anomalies caused by computer attacks in industrial Internet of Things networks. To detect anomalies, a new method has been developed using the technology of hierarchical temporary memory, which is based on the innovative neocortex model. An experimental study of the developed anomaly detection method based on the HTM model demonstrated the superiority of the developed solution over the LSTM-based analogue. The developed prototype of the anomaly detection system provides continuous online unsupervised learning, takes into account the current network context, and also applies the accumulated experience by supporting the memory mechanism</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Hierarchical Temporary Memory</kwd>
        <kwd>Artificial Intelligence</kwd>
        <kwd>Computer Attacks</kwd>
        <kwd>Neocortex</kwd>
        <kwd>Online Learning</kwd>
        <kwd>Sparse Distributed Representations</kwd>
        <kwd>Network Traffic</kwd>
        <kwd>HTM</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
