BLITHE: Behavior Rule-Based Insider Threat Detection for Smart Grid

Bao, Haiyong; Lu, Rongxing; Li, Beibei; Deng, Ruilong

doi:10.1109/jiot.2015.2459049

Cited by 44 publications

(33 citation statements)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Particularly, this technique is often adopted to detect those cyberattacks that interrupt, fabricate, intercept or modify communication messages between the HMI and PLC. H. Bao et al [10] proposed a behavior rule-based methodology monitoring devices in the smart grid for insider threat detection. Results showed that this approach could detect abnormal behaviors in pervasive smart grid applications.…”

Section: Related Workmentioning

confidence: 99%

Towards a Cyber Defense Framework for SCADA Systems Based on Power Consumption Monitoring

Jiménez¹,

Chen²,

Nichols³

et al. 2017

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

Supervisory control and data acquisition (SCADA) systems are industrial automation systems that remotely monitor and control critical infrastructures. SCADA systems are major targets for espionage and sabotage attackers. Current commercial o↵-the-shelf security solutions are insu cient in protecting SCADA systems against sophisticated cyber-attacks. Furthermore, these breaches are not detected in real-time or fast enough to prevent further damages. To address this challenge we present a feasibility study that proves monitoring power consumption of SCADA devices is an e↵ective approach to detect cyber-attacks. We built a testbed containing a Programmable Logic Controller (PLC) that was instrumented to record its power usage. Three SCADAspecific cyber-attacks were simulated and we report the power consumption of the PLC under these normal and anomalous scenarios. We show that it is possible to distinguish the PLC power utilization between these scenarios. In route to this result we found and describe vulnerabilities in the DF-1 protocol.

show abstract

Section: Related Workmentioning

confidence: 99%

Towards a Cyber Defense Framework for SCADA Systems Based on Power Consumption Monitoring

Jiménez¹,

Chen²,

Nichols³

et al. 2017

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

show abstract

“…Internetof-Things), ensuring the security of smart grids and other cyber-physical systems is crucial to the stability of a society [1], [3], [25], [26]. One current line of research is detecting and mitigating insider attacks in smart grids (see [1], [3], [11], [27]- [29]). Liu [29] is, probably, the first to study a new class of insider attacks, the false data injection (FDI) attacks.…”

Section: Related Workmentioning

confidence: 99%

“…To guarantee high reliability and robustness of the underlying critical infrastructure, real-time monitoring, data analytics, and control are highly critical. Empirically, data analytics is generally performed by the state estimator at the system control center (CC) [1]- [3]. However, with the increasing number of interconnections, nonlinearity, and dynamics, real-time data analytics will inevitably impose significant computational burden and complexity on CC [4].…”

Section: Introductionmentioning

confidence: 99%

“…Opportunistic attacks [1], [16] are one such example. Specifically, rather than seeking to falsify measurement data by compromising a set of PMUs, opportunistic attackers attempt to manipulate elec- tricity prices by only compromising the intelligent electronic device which is responsible for determining the real-time electricity prices, say the LA.…”

Section: Introductionmentioning

confidence: 99%

“…Moreover, opportunistic attackers can flexibly adjust their attack strategies (e.g. probability to launch an attack when there is a chance) based on system noise level to evade detection or scrutiny [1]. Hence, to identify the abnormality of any possible compromised LA, an effective way is to observe and assess their behaviors (i.e.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

DDOA: A Dirichlet-Based Detection Scheme for Opportunistic Attacks in Smart Grid Cyber-Physical System

Wang

et al. 2016

IEEE Trans.Inform.Forensic Secur.

Self Cite

View full text Add to dashboard Cite

In the hierarchical control paradigm of a smart grid cyber-physical system, decentralized local agents (LAs) can potentially be compromised by opportunistic attackers to manipulate electricity prices for illicit financial gains. In this paper, to address such opportunistic attacks, we propose a Dirichlet-based detection scheme (DDOA), where a Dirichletbased probabilistic model is built to assess the reputation levels of LAs. Initial reputation levels of the LAs are first trained using the proposed model, based on their historical operating observations. An adaptive detection algorithm with reputation incentive mechanism is then employed to detect opportunistic attackers. We demonstrate the utility of our proposed scheme using data collected from the IEEE 39-bus power system with the PowerWorld simulator.Index Terms-Cyber-physical system security, smart grid, opportunistic attack, intrusion detection, smart electricity market, Dirichlet-based reputation.

show abstract

Detection of False Data Injection Attacks in Smart Grid Cyber-Physical Systems

Xiao

2020

Wireless Networks

Self Cite

View full text Add to dashboard Cite

Brunswick (UNB), Canada -for their unwavering support and constructive guidance throughout this thesis. They, upon whose shoulders I stand, explored and paved the path before me. Without them, this thesis would simply not have been possible. Such academic rigour as may be found in this thesis is largely due to Dr.Xiao's refusal to let me get away with things, while his unerring sense of when and how to intervene has taught me not only as a good researcher but also a potential good tutor. He is always willing to take time to listen, and usually provide insightful questions and comments as well as clear instructions as feedback. Dr. Lu is a renowned expert in cyber security domain, whose passion for doing research and teaching has set a new standard for everyone involved. His unstinting support and encouragement have driven me to strive to excellence.Having also a friend figure, Dr. Lu is really a nice guy who cares about his students not only on research career but also on daily lives. Many thanks are also due to Dr. Wang Licheng at Beijing University of Posts and Telecommunications (BUPT), China, who started me down this road with selfless support, encouragement, and guidance.

show abstract

BLITHE: Behavior Rule-Based Insider Threat Detection for Smart Grid

Cited by 44 publications

References 34 publications

Towards a Cyber Defense Framework for SCADA Systems Based on Power Consumption Monitoring

Towards a Cyber Defense Framework for SCADA Systems Based on Power Consumption Monitoring

DDOA: A Dirichlet-Based Detection Scheme for Opportunistic Attacks in Smart Grid Cyber-Physical System

Detection of False Data Injection Attacks in Smart Grid Cyber-Physical Systems

Contact Info

Product

Resources

About