Light-weight and Robust Network Intrusion Detection for Cyber-attacks in Digital Substations
Authors/Creators
- 1. KIOS Research and Innovation Center of Excellence and Department of Electrical and Computer Engineering University of Cyprus
Description
This paper proposes a rule-based Network Intrusion Detection System (NIDS) to detect a wide range of cyber-attacks that target the specific protocol in power system protection applications. The proposed NIDS is based on the analysis of the normal behavior of the protocol, contrasted to attacker behavior aiming to affect the normal operation of an energy system by exploiting intrinsic vulnerabilities of the protocol. A set of time interval rules are derived to detect such cyber-attacks based on the time domain, while a sliding window mechanism is applied to handle the network jitter effect. The main advantages of the proposed solution are the robustness to network faults (i.e., network delays and packet loss) and the low attack detection time, which is less than 5% of the strict time delivery requirement of GOOSE messages.
Notes
Files
Intrusion_Detection_for_Cyber_attacks final.pdf
Files
(881.4 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:5ba60cb8bfc56afd050d96b4db8a1d33
|
881.4 kB | Preview Download |