A Framework for Evaluating Intrusion Detection Architectures in Advanced Metering Infrastructures
A Framework for Evaluating Intrusion Detection Architectures in Advanced Metering Infrastructures
复制标题
评估高级计量基础设施中入侵检测架构的框架
DOI：
--
复制
发表时间：
2014
影响因子：
9.6
通讯作者：
W. Sanders
中科院分区：
文献类型：
--
作者：
A. Cárdenas;R. Berthier;R. Bobba;J. Huh;Jorjeta G. Jetcheva;David Grochocki;W. Sanders
先进计量基础设施（AMI）网络的规模和复杂性要求对安全解决方案的部署进行精心规划。特别是，大量的AMI设备以及预计在各种AMI网络上进行的通信量和多样性，使得入侵检测系统（IDS）的作用至关重要。理解可扩展且全面的IDS的权衡取舍是投资正确技术并在最佳位置部署传感器的关键。本文回顾了与不同IDS部署选项相关的收益和成本，包括集中式或分布式解决方案。提出了一个通用的成本模型框架，以帮助公用事业公司（AMI资产所有者）在选择IDS部署架构和管理其安全投资时做出更明智的决策。我们通过案例研究说明了该框架如何应用，并强调了出现的有趣的成本/收益权衡。
The scale and complexity of Advanced Metering Infrastructure (AMI) networks requires careful planning for the deployment of security solutions. In particular, the large number of AMI devices and the volume and diversity of communication expected to take place on the various AMI networks make the role of intrusion detection systems (IDSes) critical. Understanding the trade-offs for a scalable and comprehensive IDS is key to investing in the right technology and deploying sensors at optimal locations. This paper reviews the benefits and costs associated with different IDS deployment options, including either centralized or distributed solution. A general cost-model framework is proposed to help utilities (AMI asset owners) make more informed decisions when selecting IDS deployment architectures and managing their security investments. We illustrate how the framework can be applied through case studies, and highlight the interesting cost/benefit trade-offs that emerge.