Synchrophasor technology is used for real-time control and monitoring in modern power systems. IEEE C37.118 communication framework is most widely used by synchrophasor devices such as Phasor Measurement Units (PMUs) and Phasor Data Concentrators (PDCs). The size, format and structure of IEEE C37.118 payloads vary significantly from one PMU/PDC to the other which make traditional signature based IDS tools (i.e., SNORT, Suricata, etc) inefficient for synchrophasor-based systems. Thus, this paper presents the design of a comprehensive model-based Synchrophasor Specific Intrusion Detection System (SS-IDS) and analyzes its features and capabilities. The proposed SS-IDS is implemented as a light-weight efficient multi-threaded tool using optimized PCAP filters. The defined model-based rules enable it to detect known as well as unknown attacks (including unintentional misuse). The functionalities of the proposed SS-IDS are validated in the lab using a testbed consisting of real PMU data and NRL CORE based emulated network.
|Title of host publication||Proceedings of Power and Energy Society General Meeting (PESGM), 2017|
|Number of pages||5|
|Publication status||Published - 01 Feb 2018|
|Event||IEEE Power and Energy Society General Meeting - Chicago, United States|
Duration: 16 Jul 2017 → 20 Jul 2017
|Name||IEEE Power & Energy Society General Meeting: Proceedings|
|Conference||IEEE Power and Energy Society General Meeting|
|Abbreviated title||IEEE PES-GM 2017|
|Period||16/07/2017 → 20/07/2017|
Khan, R., Albalushi, A., McLaughlin, K., Laverty, D., & Sezer, S. (2018). Model based Intrusion Detection System for Synchrophasor Applications in Smart Grid. In Proceedings of Power and Energy Society General Meeting (PESGM), 2017 (IEEE Power & Energy Society General Meeting: Proceedings). IEEE .