Multiattribute SCADA-Specific Intrusion Detection System for Power Networks
Multiattribute SCADA-Specific Intrusion Detection System for Power Networks
复制标题
DOI：
10.1109/tpwrd.2014.2300099
复制
发表时间：
2014-02
影响因子：
4.4
通讯作者：
Y. Yang;K. Mclaughlin;S. Sezer;Tim Brian Littler;E. Im;B. Pranggono;H. F. Wang
中科院分区：
文献类型：
--
作者：
Y. Yang;K. Mclaughlin;S. Sezer;Tim Brian Littler;E. Im;B. Pranggono;H. F. Wang
电力系统网络中监控和数据采集（SCADA）系统的互联性和复杂性的增加使系统暴露于许多潜在的漏洞。在本文中，我们提出了一种新方法用于下一代特定于scada的入侵检测系统（IDS）。该系统分析了多个属性，以提供能够减轻各种网络攻击威胁的综合解决方案。为了提高SCADA网络系统的安全性，多属性入侵检测包括异构白名单和基于行为的概念。本文还提出了一种基于IDS的多层网络安全框架，在不影响正常数据可用性的情况下保护智能电网SCADA网络安全。此外，本文提出了一个特定于scada的网络安全测试平台来研究模拟攻击，该测试平台已在本文中用于验证所提出的方法。
The increased interconnectivity and complexity of supervisory control and data acquisition (SCADA) systems in power system networks has exposed the systems to a multitude of potential vulnerabilities. In this paper, we present a novel approach for a next-generation SCADA-specific intrusion detection system (IDS). The proposed system analyzes multiple attributes in order to provide a comprehensive solution that is able to mitigate varied cyber-attack threats. The multiattribute IDS comprises a heterogeneous white list and behavior-based concept in order to make SCADA cybersystems more secure. This paper also proposes a multilayer cyber-security framework based on IDS for protecting SCADA cybersecurity in smart grids without compromising the availability of normal data. In addition, this paper presents a SCADA-specific cybersecurity testbed to investigate simulated attacks, which has been used in this paper to validate the proposed approach.