Model based Intrusion Detection System for Synchrophasor Applications in Smart Grid

Rafiullah Khan, Abdullah Albalushi, Kieran McLaughlin, David Laverty, Sakir Sezer

Research output: Chapter in Book/Report/Conference proceedingConference contribution

12 Citations (Scopus)
623 Downloads (Pure)

Abstract

Synchrophasor technology is used for real-time control and monitoring in modern power systems. IEEE C37.118 communication framework is most widely used by synchrophasor devices such as Phasor Measurement Units (PMUs) and Phasor Data Concentrators (PDCs). The size, format and structure of IEEE C37.118 payloads vary significantly from one PMU/PDC to the other which make traditional signature based IDS tools (i.e., SNORT, Suricata, etc) inefficient for synchrophasor-based systems. Thus, this paper presents the design of a comprehensive model-based Synchrophasor Specific Intrusion Detection System (SS-IDS) and analyzes its features and capabilities. The proposed SS-IDS is implemented as a light-weight efficient multi-threaded tool using optimized PCAP filters. The defined model-based rules enable it to detect known as well as unknown attacks (including unintentional misuse). The functionalities of the proposed SS-IDS are validated in the lab using a testbed consisting of real PMU data and NRL CORE based emulated network.
Original languageEnglish
Title of host publicationProceedings of Power and Energy Society General Meeting (PESGM), 2017
PublisherInstitute of Electrical and Electronics Engineers Inc.
Number of pages5
ISBN (Electronic)978-1-5386-2212-4
Publication statusPublished - 01 Feb 2018
EventIEEE Power and Energy Society General Meeting - Chicago, United States
Duration: 16 Jul 201720 Jul 2017
http://pes-gm.org/2017/
http://pes-gm.org/2017/

Publication series

NameIEEE Power & Energy Society General Meeting: Proceedings
PublisherIEEE
ISSN (Electronic)1944-9933

Conference

ConferenceIEEE Power and Energy Society General Meeting
Abbreviated titleIEEE PES-GM 2017
Country/TerritoryUnited States
CityChicago
Period16/07/201720/07/2017
Internet address

Fingerprint

Dive into the research topics of 'Model based Intrusion Detection System for Synchrophasor Applications in Smart Grid'. Together they form a unique fingerprint.

Cite this