Multidimensional Intrusion Detection System for IEC 61850 based SCADA Networks

Yi Yang; Lei Gao; Yu-Bo Yuan; Kieran McLaughlin; Sakir Sezer; Yan-Feng Gong

doi:10.1109/TPWRD.2016.2603339

Multidimensional Intrusion Detection System for IEC 61850 based SCADA Networks

Yi Yang
, Lei Gao
, Yu-Bo Yuan
, Kieran McLaughlin
, Sakir Sezer
, Yan-Feng Gong

School of Electronics, Electrical Engineering and Computer Science

Research output: Contribution to journal › Article › peer-review

151 Citations (Scopus)

2747 Downloads (Pure)

Abstract

Emerging cybersecurity vulnerabilities in supervisory control and data acquisition (SCADA) systems are becoming urgent engineering issues for modern substations. This paper proposes a novel intrusion detection system (IDS) tailored for cybersecurity of IEC 61850 based substations. The proposed IDS integrates physical knowledge, protocol specifications and logical behaviours to provide a comprehensive and effective solution that is able to mitigate various cyberattacks. The proposed approach comprises access control detection, protocol whitelisting, model-based detection, and multi-parameter based detection. This SCADA-specific IDS is implemented and validated using a comprehensive and realistic cyber-physical test-bed and data from a real 500kV smart substation.

Original language	English
Pages (from-to)	1068
Number of pages	1
Journal	Ieee Transactions On Power Delivery
Volume	32
Issue number	2
Early online date	26 Aug 2016
DOIs	https://doi.org/10.1109/TPWRD.2016.2603339
Publication status	Early online date - 26 Aug 2016

Access to Document

10.1109/TPWRD.2016.2603339Licence: Unspecified

Multidimensional Intrusion Detection System for IEC 61850 based SCADA Networks
Copyright 2016 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other users, including reprinting/ republishing this material for advertising or promotional purposes, creating new collective works for resale or redistribution to servers or lists, or reuse of any copyrighted components of this work in other works.
Accepted author manuscript, 606 KBLicence: Unspecified

R6440ECI: Smart Grid Protection Against Cyber Attacks
Sezer, S. (PI) & McLaughlin, K. (CoI)
15/04/2014 → 30/06/2017
Project: Research

Kieran McLaughlin
- kieran.mclaughlinqub.acuk
Person: Academic

Cite this

@article{8f0cc920046f4507aa3f8c74290a8140,

title = "Multidimensional Intrusion Detection System for IEC 61850 based SCADA Networks",

abstract = "Emerging cybersecurity vulnerabilities in supervisory control and data acquisition (SCADA) systems are becoming urgent engineering issues for modern substations. This paper proposes a novel intrusion detection system (IDS) tailored for cybersecurity of IEC 61850 based substations. The proposed IDS integrates physical knowledge, protocol specifications and logical behaviours to provide a comprehensive and effective solution that is able to mitigate various cyberattacks. The proposed approach comprises access control detection, protocol whitelisting, model-based detection, and multi-parameter based detection. This SCADA-specific IDS is implemented and validated using a comprehensive and realistic cyber-physical test-bed and data from a real 500kV smart substation.",

author = "Yi Yang and Lei Gao and Yu-Bo Yuan and Kieran McLaughlin and Sakir Sezer and Yan-Feng Gong",

year = "2016",

month = aug,

day = "26",

doi = "10.1109/TPWRD.2016.2603339",

language = "English",

volume = "32",

pages = "1068",

journal = "Ieee Transactions On Power Delivery",

issn = "0885-8977",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "2",

}

TY - JOUR

T1 - Multidimensional Intrusion Detection System for IEC 61850 based SCADA Networks

AU - Yang, Yi

AU - Gao, Lei

AU - Yuan, Yu-Bo

AU - McLaughlin, Kieran

AU - Sezer, Sakir

AU - Gong, Yan-Feng

PY - 2016/8/26

Y1 - 2016/8/26

N2 - Emerging cybersecurity vulnerabilities in supervisory control and data acquisition (SCADA) systems are becoming urgent engineering issues for modern substations. This paper proposes a novel intrusion detection system (IDS) tailored for cybersecurity of IEC 61850 based substations. The proposed IDS integrates physical knowledge, protocol specifications and logical behaviours to provide a comprehensive and effective solution that is able to mitigate various cyberattacks. The proposed approach comprises access control detection, protocol whitelisting, model-based detection, and multi-parameter based detection. This SCADA-specific IDS is implemented and validated using a comprehensive and realistic cyber-physical test-bed and data from a real 500kV smart substation.

AB - Emerging cybersecurity vulnerabilities in supervisory control and data acquisition (SCADA) systems are becoming urgent engineering issues for modern substations. This paper proposes a novel intrusion detection system (IDS) tailored for cybersecurity of IEC 61850 based substations. The proposed IDS integrates physical knowledge, protocol specifications and logical behaviours to provide a comprehensive and effective solution that is able to mitigate various cyberattacks. The proposed approach comprises access control detection, protocol whitelisting, model-based detection, and multi-parameter based detection. This SCADA-specific IDS is implemented and validated using a comprehensive and realistic cyber-physical test-bed and data from a real 500kV smart substation.

U2 - 10.1109/TPWRD.2016.2603339

DO - 10.1109/TPWRD.2016.2603339

M3 - Article

SN - 0885-8977

VL - 32

SP - 1068

JO - Ieee Transactions On Power Delivery

JF - Ieee Transactions On Power Delivery

IS - 2

ER -

Multidimensional Intrusion Detection System for IEC 61850 based SCADA Networks

Abstract

Access to Document

Fingerprint

Projects

R6440ECI: Smart Grid Protection Against Cyber Attacks

Profiles

Kieran McLaughlin

Cite this