Intrusion detection of NSM based DoS attacks using data mining in smart grid

Energies

Volumn 5, Issue 10, 2012, Pages 4091-4109

  Choi, Kyung ^a   Chen, Xinyi ^a   Li, Shi ^a   Kim, Mihui ^b   Chae, Kijoon ^a   Na, JungChan ^c  

^a Ewha Womans University   (South Korea)

^b Hankyong National University   (South Korea)

^c Electronics and Telecommunications Research Institute (ETRI)   (South Korea)

Author keywords

Data mining; Denial of service (DoS) attack; Intrusion detection; Network and system management (NSM); Smart grid

Indexed keywords

DECISION TREES; DENIAL-OF-SERVICE ATTACK; DIGITAL STORAGE; ELECTRIC POWER TRANSMISSION NETWORKS; INFORMATION MANAGEMENT; INTRUSION DETECTION; MERCURY (METAL); OBJECT DETECTION; SMART POWER GRIDS; TELECOMMUNICATION TRAFFIC;

BUFFER OVERFLOW ATTACKS; DATA MINING METHODS; DECISION-TREE ALGORITHM; DENIAL OF SERVICE; HIGH DETECTION RATE; KNOWLEDGE ANALYSIS; SMART GRID; SYSTEM MANAGEMENT;

DATA MINING;

EID: 84870360312     PISSN: None     EISSN: 19961073     Source Type: Journal    
DOI: 10.3390/en5104091     Document Type: Article

References (28)

1. IEC 62351-7 TS Ed.1: Power Systems Management and Associated Information Exchange-Data and Communications Security-Part 7: Network and System Management (NSM) Data Object Models; International Electrotechnical Commission (IEC): Geneva; Switzerland, 2009.
2. IEC 62351: Power Systems Management and Associated Information Exchange-Data and Communications Security; International Electrotechnical Commission (IEC): Geneva; Switzerland, 2007.
3. Wikipedia. SYN Flood. Available online: http://en.wikipedia.org/wiki/Syn_flood (accessed on 12 October 2012).
4. Wikipedia. Buffer Overflow. Available online: http://en.wikipedia.org/wiki/Buffer_Overflow (accessed on 12 October 2012).
5. IEC 61850: Communication Networks and Systems in Substations; International Electrotechnical Commission (IEC): Geneva; Switzerland, 2003.
6. IEC 60870-6-503 Ed2.0 Telecontrol Equipment and Systems-Part 6-503 Telecontrol Protocols Compatible with ISO Standards and ITU-T Recommendations-TASE.2 Service and Protocol. International Electrotechnical Commission (IEC): Geneva; Switzerland, 2009.
7. Liu, Y.; Ning, P.; Reiter, M.K. False data injection attacks against state estimation in electric power grids. ACM Trans. Info. Syst. Sec. 2011, 14, 13:1-13:33.
8. Dán, G.; Sandberg, H. Stealth attacks and protection schemes for state estimators in power systems. In Proceedings of 1st IEEE International Conference on Smart Grid Communications, Gaithersburg, MD, USA, 4-6 October 2010; pp. 214-219.
9. Kosut, O.; Jia, L.; Thomas, R.J.; Tong, L. Malicious data attacks on the smart grid. IEEE Trans. Smart Grid 2011, 2, 645-658.
10. Zhang, Y.; Wang, L.; Sun, W.; Green, R.C.; Alam, M. Artificial immune system based intrusion detection in a distributed hierarchical network architecture of smart grid. In Proceedings of IEEE Power and Energy Society General Meeting, Detroit, MI, USA, 24-29 July 2011; pp. 1-8.
11. Chen, T.M.; Sanchez-Aarnoutse, J.C.; Buford, J. Petri Net modeling of cyber-physical attacks on smart grid. IEEE Trans. Smart Grid 2011, 2, 741-749.
12. Yuan, Y.; Li, Z.; Ren, K. Modeling load redistribution attacks in power systems. IEEE Trans. Smart Grid 2011, 2, 382-390.
13. Xie, L.; Mo, Y.; Sinopoli, B. Integrity data attacks in power market operations. IEEE Trans. Smart Grid 2011, 2, 659-666.
14. Mohsenian-Rad, A.H.; Leon-Garcia, A. Distributed internet-based load altering attacks against smart power grids. IEEE Trans. Smart Grid 2011, 2, 667-674.
15. Lu, Z.; Lu, X.; Wang, W.; Wang, C. Review and evaluation of security threats on the communication networks in the smart grid. In Proceedings of IEEE Military Communications Conference (Milcom 2010), San Jose, CA, USA, 31 October-3 November 2010; pp. 1830-1835.
16. Kundur, D.; Feng, X.; Liu, S.; Zourntos, T.; Butler-Purry, K. Towards a framework for cyber attack impact analysis of the electric smart grid. In Proceedings of 1st IEEE International Conference on Smart Grid Communications, Gaithersburg, MD, USA, 4-6 October 2010; pp. 244-249.
17. Fries, S.; Hof, H.J.; Seewald, M. Enhancing IEC 62351 to improve security for energy automation in smart grid environments. In Proceedings of 5th International Conference on Internet and Web Applications and Services, Barcelona, Spain, 9-15 May 2010; pp. 135-142.
18. Mohaghi, S. A fuzzy cognitive map for data integrity assessment in a IEC 61850 based substation. In Proceedings of IEEE Power and Energy Society General Meeting, Minneapolis, MN, USA, 25-29 July 2010; pp. 1-7.
19. IEC 61850-7-2: Communication Networks and Systems in Substations-Part 7-2: Basic Communication Structure for Substation and Feeder Equipment-Abstract Communication Service Interface (ACSI). International Electrotechnical Commission (IEC): Geneva; Switzerland, 2010.
20. Engler, F.; Kern, T.; Andersson, L.; Kruimer, B.; Schimmel, G.; Schwarz, K. IEC 61850 based digital communication as interface to the primary equipment. In Proceeding of the International Council on Large Electric Systems (CIGRÉ) Sessions 2004, Paris, France, 29 August-3 September 2004; pp. B3-205:1-B3-205:8.
21. Ozansoy, C.R. Design & Implementation of a Universal Communications Processor for Substation Integration, Automation and Protection; Victoria University Press: Melbourne, Australia, 2006.
22. Weka 3: Data Mining Software in Java; University of Waikato: Hamilton, New Zealand, 2005. Availble online: http://www.cs.waikato.ac.nz/ml/weka/ (accessed on 12 October 2012).
23. Freund, Y.; Mason, L. The alternating decision tree learning algorithm. In Proceedings of the 16th International Conference on Machine Learning (ICML-99), Bled, Slovenia, 27-30 June 1999; Volume 54, pp. 124-133.
24. Holmes, G.; Pfahringer, B.; Kirkby, R.; Frank, E.; Hall, M. Multiclass alternating decision trees. In Proceeding of the ECML 13th European Conference on Machine Learning, Helsinki, Finland, 19-23 August 2002; pp. 161-172.
25. Amit, Y.; Geman, D. Shape quantization and recognition with randomized trees. Neural Comput. 1997, 9, 1545-1588.
26. Su, J.; Zhang, H. A fast decision tree learning algorithm. In Proceeding of the AAAI 21st National Conference on Artificial Intelligence, Boston, MA, USA, 16-20 July 2006; pp. 500-505.
27. Quinlan, J.R. C4.5: Programs for Machine Learning; Morgan Kaufmann: San Francisco, CA, USA, 1993.
28. Webb, G.I. Decision tree grafting from the all-tests-but-one partition. In Proceeding of the IJCAI 6th International Joint Conference on Artificial Intelligence, Stockholm, Sweden, 31 July-6 August 1999; pp. 702-707.