Security Evaluation of Two Intrusion Detection Systems in Smart Grid SCADA Environment

Singh, Vivek Kumar; Ebrahem, Haythem; Govindarasu, Manimaran

doi:10.1109/naps.2018.8600548

Security Evaluation of Two Intrusion Detection Systems in Smart Grid SCADA Environment

Conference · Sat Sep 01 00:00:00 EDT 2018 · 2018 North American Power Symposium (NAPS)

DOI:https://doi.org/10.1109/naps.2018.8600548· OSTI ID:1985687

^[1]; Ebrahem, Haythem ^[2]; ^[2]

Iowa State Univ., Ames, IA (United States); Iowa State University
Iowa State Univ., Ames, IA (United States)

The increased complexity and interconnectivity of SCADA infrastructure in the power system have exposed it to the multitude of vulnerabilities. There is a growing emphasis towards developing an efficient intrusion detection system (IDS) to strengthen the security of the SCADA control system. This is a research-in-progress paper which presents the application of two anomaly-based intrusion detection systems (AIDS) in detecting the stealthy cyber-attack on the SCADA control system. We have applied the IDS tools Snort and Bro, in designing the IDS and later, compared their performances in terms of detection rate and latency in the alert packets with a motive of selecting better IDS for the SCADA security. Specifically, the timing-based rule is applied to identify the malicious packets based on the high temporal frequency in the network traffic. For the case study, we have implemented the SCADA based protection scheme which performs an autonomous protection to mitigate the system disturbances. We first implemented the stealthy cyber-attack which compromised the SCADA controller followed by data integrity attack on the system generator. Next, we perform the impact analysis during the attack followed by performance evaluation of IDS tools. Our experimental results show that the IDS tools are efficient in detecting cyber-attacks within an acceptable time frame for different sizes of network packets.

Research Organization:: Iowa State University

Sponsoring Organization:: USDOE Office of Cybersecurity, Energy Security, and Emergency Response (CESER)

Contributing Organization:: Iowa State University

DOE Contract Number:: OE0000830

OSTI ID:: 1985687

Report Number(s):: DOE-ISU-0000830-15

Journal Information:: 2018 North American Power Symposium (NAPS), Journal Name: 2018 North American Power Symposium (NAPS)

Country of Publication:: United States

Language:: English

References (11)

Cyber-Physical Security Testbeds: Architecture, Application, and Evaluation for Smart Grid Hahn, Adam; Ashok, Aditya; Sridhar, Siddharth IEEE Transactions on Smart Grid, Vol. 4, Issue 2 https://doi.org/10.1109/TSG.2012.2226919	journal	June 2013
SCADA Intrusion Detection System based on temporal behavior of frequent patterns Sayegh, Naoum; Elhajj, Imad H.; Kayssi, Ayman MELECON 2014 - 2014 17th IEEE Mediterranean Electrotechnical Conference https://doi.org/10.1109/MELCON.2014.6820573	conference	April 2014
Security of SCADA systems against cyber–physical attacks Do, Van Long; Fillatre, Lionel; Nikiforov, Igor IEEE Aerospace and Electronic Systems Magazine, Vol. 32, Issue 5 https://doi.org/10.1109/MAES.2017.160047	journal	May 2017
Wide-area SCADA system with distributed security framework Zhang, Yang; Chen, Jun-Liang Journal of Communications and Networks, Vol. 14, Issue 6 https://doi.org/10.1109/JCN.2012.00025	journal	December 2012
A survey SCADA of and critical infrastructure incidents Miller, Bill; Rowe, Dale Proceedings of the 1st Annual conference on Research in information technology - RIIT '12 https://doi.org/10.1145/2380790.2380805	conference	January 2012
Neural Network based Intrusion Detection System for critical infrastructures Linda, Ondrej; Vollmer, Todd; Manic, Milos 2009 International Joint Conference on Neural Networks https://doi.org/10.1109/IJCNN.2009.5178592	conference	June 2009
Comparative study and analysis of network intrusion detection tools Bhosale, Dhanashri Ashok; Mane, Vanita Manikrao 2015 International Conference on Applied and Theoretical Computing and Communication Technology (iCATccT) https://doi.org/10.1109/ICATCCT.2015.7456901	conference	October 2015
On SCADA control system command and response injection and intrusion detection No authors listed 2010 eCrime Researchers Summit https://doi.org/10.1109/ecrime.2010.5706699	conference	January 2010
Stealthy cyber attacks and impact analysis on wide-area protection of smart grid Kumar Singh, Vivek; Ozen, Altay; Govindarasu, Manimaran 2016 North American Power Symposium (NAPS) https://doi.org/10.1109/NAPS.2016.7747927	conference	September 2016
Multiattribute SCADA-Specific Intrusion Detection System for Power Networks Yang, Y.; McLaughlin, K.; Sezer, S. IEEE Transactions on Power Delivery, Vol. 29, Issue 3, p. 1092-1102 https://doi.org/10.1109/TPWRD.2014.2300099	journal	June 2014
Behavior rule based intrusion detection Mizutani, Masayoshi; Takeda, Keiji; Murai, Jun Proceedings of the 5th international student workshop on Emerging networking experiments and technologies https://doi.org/10.1145/1658997.1659028	conference	December 2009

Similar Records

Distributed Intrusion Detection System using Semantic-based Rules for SCADA in Smart Grid

Conference · Mon Oct 12 00:00:00 EDT 2020 · 2020 IEEE/PES Transmission and Distribution Conference and Exposition (T&D) · OSTI ID:1985672

Testbed-based Evaluation of SIEM Tool for Cyber Kill Chain Model in Power Grid SCADA System

Conference · Tue Oct 01 00:00:00 EDT 2019 · 2019 North American Power Symposium (NAPS) · OSTI ID:1985678

HIDES: Hybrid Intrusion Detector for Energy Systems

Conference · Thu Mar 19 00:00:00 EDT 2020 · OSTI ID:1669439

Related Subjects

24 POWER TRANSMISSION AND DISTRIBUTION
Smart Grid
Intrusion Detection System
Testbeds
Security Evaluation

Security Evaluation of Two Intrusion Detection Systems in Smart Grid SCADA Environment

Citation Formats

References (11)

Similar Records

Related Subjects