Combined Network Intrusion and Phasor Data Anomaly Detection for Secure Dynamic Control Centers

Abstract

The dynamic operation of power transmission systems requires the acquisition of reliable and accurate measurement and state information. The use of TCP/IP-based communication protocols such as IEEE C37.118 or IEC 61850 introduces different gateways to launch cyber-attacks and to compromise major system operation functionalities. Within this study, a combined network intrusion and phasor data anomaly detection system is proposed to enable a secure system operation in the presence of cyber-attacks for dynamic control centers. This includes the utilization of expert-rules, one-class classifiers, as well as recurrent neural networks to monitor different network packet and measurement information. The effectiveness of the proposed network intrusion and phasor data anomaly detection system is shown within a real-time simulation testbed considering multiple operation and cyber-attack conditions.

Emerging Cybersecurity and Privacy Threats to Electric Vehicles and Their Impact on Human and Environmental Sustainability

“…Malware attacks can be defended with the appropriate use of an anomaly-based intrusion detection system (IDS) [117]. These IDSes work by recording the baseline traffic behavior of a vehicular network and then comparing the live network with the recorded baseline patterns to detect anomalies or different behavior in the network [118]. Malware spread can also be controlled by limiting the direct installation of multiple applications on vehicular networks.…”