This paper presents our simulation of cyber-attacks and detection strategies on the traffic control system in Daytona Beach, FL. using Raspberry Pi virtual machines and the OPNSense firewall, along with traffic dynamics from SUMO and exploitation via the Metasploit framework. We try to answer the research questions: are we able to identify cyber attacks by only analyzing traffic flow patterns. In this research, the cyber attacks are focused particularly when lights are randomly turned all green or red at busy intersections by adversarial attackers. Despite challenges stemming from imbalanced data and overlapping traffic patterns, our best model shows 85\% accuracy when detecting intrusions purely using traffic flow statistics. Key indicators for successful detection included occupancy, jam length, and halting durations.
View on arXiv@article{zhou2025_2505.01489,
title={ Machine Learning for Cyber-Attack Identification from Traffic Flows },
author={ Yujing Zhou and Marc L. Jacquet and Robel Dawit and Skyler Fabre and Dev Sarawat and Faheem Khan and Madison Newell and Yongxin Liu and Dahai Liu and Hongyun Chen and Jian Wang and Huihui Wang },
journal={arXiv preprint arXiv:2505.01489},
year={ 2025 }
}