Cyber-Physical-Security Framework for Building Energy Management System
Cyber-Physical-Security Framework for Building Energy Management System
复制标题
建筑能源管理系统的网络物理安全框架
DOI：
10.1109/iccps.2016.7479072
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
M. Boubekeur
中科院分区：
文献类型：
--
作者：
K. Paridari;A. Mady;Isidoro S. La Porta;Rohan Chabukswar;Jacobo Blanco;André M. H. Teixeira;H. Sandberg;M. Boubekeur
能源管理系统（EMS）用于控制建筑物和校园的能源使用，通过采用监控和数据采集（SCADA）和楼宇管理系统（BMS）等技术，提供可靠的能源供应，在最大限度地减少能源消耗的同时，最大限度地提高用户的舒适度。从历史上看，当潜在的安全威胁仅仅是物理的时候，就会安装EMS系统。如今，EMS系统与建筑网络相连，从而直接与外部世界相连。这将攻击面扩展到潜在的复杂网络攻击，这会对EMS操作产生不利影响，导致服务中断和下游财务影响。目前，检测攻击的安全系统独立于那些部署弹性策略并使用非常基本方法的安全系统。我们提出了一种新的EMS网络物理安全框架，该框架在使用安全分析检测到攻击时执行弹性策略。在此框架中，弹性策略和安全分析都由EMS数据驱动，其中识别数据点之间的物理相关性以检测异常值，然后使用估计值代替异常值关闭控制回路。该框架已使用实际EMS站点的降阶模型进行了测试。
Energy management systems (EMS) are used to control energy usage in buildings and campuses, by employing technologies such as supervisory control and data acquisition (SCADA) and building management systems (BMS), in order to provide reliable energy supply and maximise user comfort while minimising energy usage. Historically, EMS systems were installed when potential security threats were only physical. Nowadays, EMS systems are connected to the building network and as a result directly to the outside world. This extends the attack surface to potential sophisticated cyber-attacks, which adversely impact EMS operation, resulting in service interruption and downstream financial implications. Currently, the security systems that detect attacks operate independently to those which deploy resiliency policies and use very basic methods. We propose a novel EMS cyber-physical-security framework that executes a resilient policy whenever an attack is detected using security analytics. In this framework, both the resilient policy and the security analytics are driven by EMS data, where the physical correlations between the data-points are identified to detect outliers and then the control loop is closed using an estimated value in place of the outlier. The framework has been tested using a reduced order model of a real EMS site.