Strategic Honeypot Game Model for Distributed Denial of Service Attacks in the Smart Grid

Wang, Kun; Du, Miao; Maharjan, Sabita; Sun, Yuqing

doi:10.1109/tsg.2017.2670144

Cited by 187 publications

(87 citation statements)

References 28 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Wang et al. () investigate honeypots as defense systems to detect and gather attack information. In particular, they focus on the interactions between the attackers and the defenders and derive optimal strategies for both sides to achieve an optimal defense strategy.…”

Section: Honeypot Basics and Relevant Researchmentioning

confidence: 99%

“…In the honeypot context, defense strategies generally include methods, such as reducing the appeal of the environment to the potential intruders, acquiring a better understanding of the critical vulnerabilities, and enhancing reaction and response capabilities. Wang et al (2017) investigate honeypots as defense systems to detect and gather attack information. In particular, they focus on the interactions between the attackers and the defenders and derive optimal strategies for both sides to achieve an optimal defense strategy.…”

Section: Defensementioning

confidence: 99%

See 1 more Smart Citation

Integrating a Proactive Technique Into a Holistic Cyber Risk Management Approach

Marotta¹,

McShane²

2018

Risk Manage Insurance Review

View full text Add to dashboard Cite

Cyber threats are an emerging risk posing a range of challenges to organizations of all sizes. Corporate risk managers need to understand that cyber risk management must not be a silo in the IT department. Cyber threats are the result of intelligent adaptive agents that cannot be managed by traditional risk management techniques only. The article describes the honeypot concept, which is a proactive measure for identifying and gathering information about attackers in order to develop suitable and effective countermeasures. In addition, this article proposes the integration of the honeypot concept into a cyber risk management approach based on the five preparedness mission areas of the Federal Emergency Management Agency (FEMA).

show abstract

Section: Honeypot Basics and Relevant Researchmentioning

confidence: 99%

Section: Defensementioning

confidence: 99%

Integrating a Proactive Technique Into a Holistic Cyber Risk Management Approach

Marotta¹,

McShane²

2018

Risk Manage Insurance Review

View full text Add to dashboard Cite

show abstract

“…As reviewed in [38], the features of the network topology have an important impact in the effectiveness of the source identification approaches, which tend to be problematic in highly non-seasonal environments. Alternatively, traps as honeypots [39], or decoy virtual machines that co-exist with those real in the same physical hosts [40] are deployed. They implement the aforementioned methods, thus providing an additional level of security.…”

Section: Countermeasuresmentioning

confidence: 99%

Entropy-Based Economic Denial of Sustainability Detection

Monge

Vidal

Villalba

2017

Entropy

View full text Add to dashboard Cite

In recent years, an important increase in the amount and impact of Distributed Denial of Service (DDoS) threats has been reported by the different information security organizations. They typically target the depletion of the computational resources of the victims, hence drastically harming their operational capabilities. Inspired by these methods, Economic Denial of Sustainability (EDoS) attacks pose a similar motivation, but adapted to Cloud computing environments, where the denial is achieved by damaging the economy of both suppliers and customers. Therefore, the most common EDoS approach is making the offered services unsustainable by exploiting their auto-scaling algorithms. In order to contribute to their mitigation, this paper introduces a novel EDoS detection method based on the study of entropy variations related with metrics taken into account when deciding auto-scaling actuations. Through the prediction and definition of adaptive thresholds, unexpected behaviors capable of fraudulently demand new resource hiring are distinguished. With the purpose of demonstrate the effectiveness of the proposal, an experimental scenario adapted to the singularities of the EDoS threats and the assumptions driven by their original definition is described in depth. The preliminary results proved high accuracy.

show abstract

“…Despite their efficiency, current traditional defense technologies are incapable of counter this type of attack. Therefore, a numerous efforts were conducted to present another transformative security solutions …”

Section: Introductionmentioning

confidence: 99%

“…Therefore, a numerous efforts were conducted to present another transformative security solutions. 17,18 Additionally, the first real and unprecedented kind of DoS attack that targeted the Ukrainian power grid in 2015 and resulted in a widespread outage 19 grabbed the attention of the scientific community to discover new innovated software integrated solutions such as Multi Agent Systems 20,21 and distributed parallel cloud computing techniques for modern power system. 22 In this paper, we developed a top level SDN security application in an SDN-enabled smart grid network to mitigate grid DoS attacks.…”

Section: Introductionmentioning

confidence: 99%

PYGRID: A software development and assessment framework for grid‐aware software defined networking

et al. 2018

View full text Add to dashboard Cite

The Internet of Things (IoT) envisions to connect Advanced Metering Infrastructure (AMI) to the Internet to facilitate efficient resource management in smart cities. Smart grid is the evolutionary approach towards a more dynamic, situation‐aware, and elastic power systems in smart cities. However, due to the huge scale, heterogeneity and complexity of the many interconnected cyber and physical devices, current network and security technologies are incapable of best serving these needs. Destructive attacks targeting these components such as Denial of Service (DoS) may fully use grid structure and disrupt its crucial service. Recent researches offer the use of modern Software Defined Networking (SDN) to solve synonymous Cyber Physical Systems (CPS) network and security challenges. These researches noted the lack of an adequate platform to simulate grid systems network infrastructure. Therefore, in this paper, we present PYGRID, a software development and assessment framework for grid‐aware SDN. Additionally, a top level SDN application is developed in SDN‐enabled smart grid network to demonstrate the effectiveness of such merger and to mitigate DoS attacks. PYGRID is developed using PYTHON, an OSI‐approved open source language considering standard client and server industrial communication protocols. IEEE 14‐bus power system is adopted to demonstrate the potent and effectiveness of the proposed solution. We conducted multiple experiments to validate the developed framework over 14‐bus system using PYPOWER. To the best of our knowledge, the resulted platform may be considered the first completely open source implementation of a secure SDN enabled smart grid simulator.

show abstract

Strategic Honeypot Game Model for Distributed Denial of Service Attacks in the Smart Grid

Cited by 187 publications

References 28 publications

Integrating a Proactive Technique Into a Holistic Cyber Risk Management Approach

Integrating a Proactive Technique Into a Holistic Cyber Risk Management Approach

Entropy-Based Economic Denial of Sustainability Detection

PYGRID: A software development and assessment framework for grid‐aware software defined networking

Contact Info

Product

Resources

About