Model based Intrusion Detection System for Synchrophasor Applications in Smart Grid

    Research output: Chapter in Book/Report/Conference proceedingConference contribution


    View graph of relations

    Synchrophasor technology is used for real-time control and monitoring in modern power systems. IEEE C37.118 communication framework is most widely used by synchrophasor devices such as Phasor Measurement Units (PMUs) and Phasor Data Concentrators (PDCs). The size, format and structure of IEEE C37.118 payloads vary significantly from one PMU/PDC to the other which make traditional signature based IDS tools (i.e., SNORT, Suricata, etc) inefficient for synchrophasor-based systems. Thus, this paper presents the design of a comprehensive model-based Synchrophasor Specific Intrusion Detection System (SS-IDS) and analyzes its features and capabilities. The proposed SS-IDS is implemented as a light-weight efficient multi-threaded tool using optimized PCAP filters. The defined model-based rules enable it to detect known as well as unknown attacks (including unintentional misuse). The functionalities of the proposed SS-IDS are validated in the lab using a testbed consisting of real PMU data and NRL CORE based emulated network.


    Original languageEnglish
    Title of host publicationProceedings of Power and Energy Society General Meeting (PESGM), 2017
    Publisher IEEE
    Number of pages5
    ISBN (Electronic)978-1-5386-2212-4
    Publication statusPublished - 01 Feb 2018
    EventIEEE Power and Energy Society General Meeting - Chicago, United States
    Duration: 16 Jul 201720 Jul 2017

    Publication series

    NameIEEE Power & Energy Society General Meeting: Proceedings
    ISSN (Electronic)1944-9933


    ConferenceIEEE Power and Energy Society General Meeting
    Abbreviated titleIEEE PES-GM 2017
    CountryUnited States
    Internet address

    ID: 120788297