Flow based monitoring of ICS communication in the smart grid

Matoušek, Petr; Ryšavý, Ondřej; Gregr, Matej; Havlena, Vojtěch

doi:10.1016/j.jisa.2020.102535

Cited by 14 publications

(8 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To realize the smart city, 'Instrumentation and Control' acts as the first and main enabler and its communication system plays the main gamechanger role. From the perspective of an instrumentation engineer, a profound analogy exists between Instrumentation Telemetry System (ITS) and Smart Grid Communication System (SGCS) [8][9][10], therefore, while designing a communication system, the smart grid's applications and relevant parameters need careful investigation. Smart grid is considered as a Cyber Physical System (CPS) and overall reliability of the smart grid is therefore dependent upon the reliability of its communication system [11].…”

Section: Literature Reviewmentioning

confidence: 99%

Optimal Wireless Technology Selection Approach for Sustainable Indian Smart Grid

Bhatt

Jani²,

Harish³

2023

SPEE

View full text Add to dashboard Cite

The smart grid is playing a game-changing role in achieving clean and green energy, infrastructure, and cities, which are all part of the sustainable development goals. The significance of communication infrastructure in the reliable design and operation of the smart grid is well recognized, notably for renewable integration, facilitating distributed energy resources and storage, demand response, and energy efficiency. Since choosing the optimal communication technology is a strategic decision, the problem needs careful investigation, taking into account realistic data traffic estimates to fulfill the communication needs of the applications envisaged. Even though a vast array of technologies with diverse capabilities is available to meet such communication needs, choosing the optimal wireless technology for a smart grid project remains a difficult challenge. In this context, to achieve and maximize the benefits of the smart grid and its applications, a systematic and efficient approach is necessary. This study proposes a data-driven decision-making approach for evaluating the capabilities of viable wireless technology options and selecting the most suitable option for the smart grid project at the design phase. The suggested approach and the decision-support tool were developed using a cost-function-based optimization technique. A case study of Siliguri city Indian smart grid pilot is discussed to validate the potential and aptness of the presented approach and suggest better technology alternatives as replacements. Being field data-driven, the presented optimization approach is simple, customizable, strategic, and re-usable with practical efficacy to assist decision-making.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Optimal Wireless Technology Selection Approach for Sustainable Indian Smart Grid

Bhatt

Jani²,

Harish³

2023

SPEE

View full text Add to dashboard Cite

show abstract

“…through analysing network traffic. The authors later extended their work by proposing an anomaly detection approach based on an analysis of SCADA protocol communication to point resource scanning, rogue devices, and unusual traffic (Matousek et al 2020). They employ finite state automata to infer the IEC 104 communication flow profile of two SCADA nodes.…”

Section: Anomaly Detection In Scada Communication Networkmentioning

confidence: 99%

“…They employ finite state automata to infer the IEC 104 communication flow profile of two SCADA nodes. If the probability of the candidate nodes is lower than the defined threshold, the detector will flag it as an unknown communication sequence (Matousek et al 2020).…”

Section: Anomaly Detection In Scada Communication Networkmentioning

confidence: 99%

Improving anomaly detection in SCADA network communication with attribute extension

2022

View full text Add to dashboard Cite

Network anomaly detection for critical infrastructure supervisory control and data acquisition (SCADA) systems is the first line of defense against cyber-attacks. Often hybrid methods, such as machine learning with signature-based intrusion detection methods, are employed to improve the detection results. Here an attempt is made to enhance the support vector-based outlier detection method by leveraging behavioural attribute extension of the network nodes. The network nodes are modeled as graph vertices to construct related attributes that enhance network characterisation and potentially improve unsupervised anomaly detection ability for SCADA network. IEC 104 SCADA protocol communication data with good domain fidelity is utilised for empirical testing. The results demonstrate that the proposed approach achieves significant improvements over the baseline approach (average $$F_{1}$$ F 1 score increased from 0.6 to 0.9, and Matthews correlation coefficient (MCC) from 0.3 to 0.8). The achieved outcome also surpasses the unsupervised scores of related literature. For critical networks, the identification of attacks is indispensable. The result shows an insignificant missed-alert rate ($$0.3\%$$ 0.3 % on average), the lowest among related works. The gathered results show that the proposed approach can expose rouge SCADA nodes reasonably and assist in further pruning the identified unusual instances.

show abstract

“…Type of Attack [36], [48], [49], [52][53][54][55][56][57][58], [62] False data injection (FDI) attacks [59], [60], [62], [75] [65] Denial-of-service attacks (DoS) [73], [75] Distributed Denial of Service attack [68] Man-in-the-middle attack [44], [66], [67] Malware Attack [36], [60], [71] Code injection [73] Dynamic load altering attacks (D-LAA) [34], [37], [38], [75] unauthorized access to systems [45], [62] State Estimation attack [65] Eavesdropping, Phishing attacks & kill Disk attacks. [59], [63] Misrepresentation of values and Price manipulation attack [66], [70] Coordinated attacks Below, we discuss these major cyber incidents identified in Table 3 and their related Countermeasures.…”

Section: Author/authorsmentioning

confidence: 99%

“…Where this Plant is under normal or under attack situations. [67] Also suggested that when such an attack is target towards Industrial Control System (ICS), system monitoring monitors ICS/SCADA protocols about I.P. flows extended to application layer data obtained from ICS packet headers.…”

Section: Man-in-the-middle Attackmentioning

confidence: 99%

Critical Infrastructure Cybersecurity Challenges: IoT in Perspective

Matey¹,

Danquah²,

Koi-Akrofi³

et al. 2021

IJNSA

View full text Add to dashboard Cite

A technology platform that is gradually bridging the gap between object visibility and remote accessibility is the Internet of Things (IoT). Rapid deployment of this application can significantly transform the health, housing, and power (distribution and generation) sectors, etc. It has considerably changed the power sector regarding operations, services optimization, power distribution, asset management and aided in engaging customers to reduce energy consumption. Despite its societal opportunities and the benefits it presents, the power generation sector is bedeviled with many security challenges on the critical infrastructure. This review discusses the security challenges posed by IoT in power generation and critical infrastructure. To achieve this, the authors present the various IoT applications, particularly on the grid infrastructure, from an empirical literature perspective. The authors concluded by discussing how the various entities in the sector can overcome these security challenges to ensure an exemplary future IoT implementation on the power critical infrastructure value chain.

show abstract

Flow based monitoring of ICS communication in the smart grid

Cited by 14 publications

References 7 publications

Optimal Wireless Technology Selection Approach for Sustainable Indian Smart Grid

Optimal Wireless Technology Selection Approach for Sustainable Indian Smart Grid

Improving anomaly detection in SCADA network communication with attribute extension

Critical Infrastructure Cybersecurity Challenges: IoT in Perspective

Contact Info

Product

Resources

About