Machine Learning based Cyber Threat Intelligence and Detection in the Smart Grid

智能电网中基于机器学习的网络威胁情报和检测

• 批准号: 529451-2018
• 负责人: Ikki, Salama
• 金额: $ 1.82万
• 依托单位: Lakehead University
• 依托单位国家: 加拿大
• 项目类别: Engage Grants Program
• 财政年份: 2018
• 资助国家: 加拿大
• 起止时间: 2018-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=654222
• 关键词: Machine; Learning; based; Cyber; Threat

Information and Communications Technologies (ICTs) integration with the electric power grid has evolved**into the Smart Grid. The aim is to incorporate internet integrated sensors, actuators, controllers and embedded**systems into electricity grids to make intelligent and better decisions in managing the customer demand and**optimizing available resources. However, ICT amalgam with grid has opened new avenues for cyber attacks.**To develop cybersecurity techniques is essential for the protection of the smart grid.**In consultation with our supporting organization, N-Dimension Solutions Inc. a leading Canadian cybersecurity**protection service provider for critical infrastructures. We have agreed to undertake machine learning research**that can improve their managed security service for utilities that combines an Intrusion Detection System (IDS)**with timely alerts, in-depth threat analytics, and actionable guidance on threat remediation and risk mitigation,**to help utilities protect their network, data and assets. Currently, N-Dimension solution lacks cognitive learning**abilities. The objective of this project is to model the behaviour of the smart grid's system. That will enable the**IDS in efficiently detecting cyber attacks utilizing the machine learning techniques developed in the result of**this research activity.**Machine learning based application is thought to be promising for cybersecurity threat detection and**intelligence, but its research is still in infancy. N-Dimension is looking to incorporating machine learning**techniques within its current platforms, in order to improve cyber attacks detection in the smart grid networks.**This project can help in improving cyber attacks detection for Canadian critical infrastructure operators. The**project will also provide essential training for the highly qualified personnel to join the Canadian high-tech**industry.

信息和通信技术(ICT)与电网的集成已经演变成**智能电网。其目标是将互联网集成传感器、执行器、控制器和嵌入式**系统整合到电网中，以便在管理客户需求和**优化可用资源方面做出智能和更好的决策。然而，ICT与网格的融合为网络攻击开辟了新的途径。**开发网络安全技术对于保护智能电网至关重要。**与我们的支持组织N-Dimension Solutions Inc.协商，N-Dimension Solutions Inc.是加拿大领先的网络安全**关键基础设施保护服务提供商。我们已同意进行机器学习研究**，以改进他们为公用事业公司提供的托管安全服务，该研究将入侵检测系统(IDS)**与及时警报、深入的威胁分析以及关于威胁补救和风险缓解的可行指导相结合，**以帮助公用事业公司保护其网络、数据和资产。目前，N维解决方案缺乏认知学习**能力。该项目的目标是对智能电网系统的行为进行建模。这将使**入侵检测系统能够利用**本研究活动开发的机器学习技术有效地检测网络攻击。**基于机器学习的应用程序被认为在网络安全威胁检测和**智能方面很有前途，但其研究仍处于初级阶段。N-Dimension正在寻求将机器学习**技术整合到其当前平台中，以改进智能电网网络中的网络攻击检测。**该项目有助于改善加拿大关键基础设施运营商的网络攻击检测。该项目还将为进入加拿大高科技行业的高素质人员提供必要的培训。