Machine learning for power system disturbance and cyber-attack discrimination

7th International Symposium on Resilient Control Systems, ISRCS 2014

Volumn , Issue , 2014, Pages

  Borges Hink, Raymond C ^a   Beaver, Justin M ^a   Buckner, Mark A ^a   Morris, Tommy ^b   Adhikari, Uttam ^b   Pan, Shengyi ^b  

^a OAK RIDGE NATIONAL LABORATORY   (United States)

^b MISSISSIPPI STATE UNIVERSITY   (United States)

Author keywords

cyber attack; machine learning; SCADA; Smart grid

Indexed keywords

CRIME; DECISION MAKING; LEARNING SYSTEMS; MACHINE LEARNING; MAN MACHINE SYSTEMS; NETWORK SECURITY;

COURSE OF ACTION; CYBER-ATTACKS; MACHINE LEARNING METHODS; POWER SYSTEM ARCHITECTURES; POWER SYSTEM DISTURBANCES; POWER SYSTEM OPERATORS; SCADA; SMART GRID;

COMPUTER CRIME;

EID: 84908701459     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISRCS.2014.6900095     Document Type: Conference Paper

References (37)

1. N. Falliere, L. O'Murchu and E. Chien, "W32. Stuxnet Dossier", Online: http://goo. gl/kzVOSC, Nov. 2010.
2. D. E. Bakken, A. Bose, C. H. Hauser, E. O. Schweitzer III, D. E. Whitehead, and G. C. Zweigle, "Smart Generation and Transmission with Coherent, Real-Time Data," Technical Report TR-GS-015. August, 2010.
3. R. Moxley and D. Dolezilek, "Case studies: Synchophasors for widearea monitoring, protection, and control," Proc. 2nd IEEE PES International Conf. and Exhibition on Innovative Smart Grid Technologies (ISGT Europe), pp. 1-7, 5-7, Dec. 2011.
4. S. Horowitz, D. Novosel, V. Madani, and M. Adamiak, "System-Wide Protection", IEEE Power & Energy Magazine, vol. 6, no. 6, pp. 34-42, Sep. 2008.
5. SEL; "Mitigating the Aurora Vulnerability with Existing Technology. " Online: http://goo. gl/9hkAJb, Oct. 2009
6. M. Masera and I. Nai Fovino, "Effects of intentional threats to power substation control systems", Int. J. Critical Infrastructures, vol. 4, no. 1/2, pp. 129-143, 2008.
7. T. Morris, S. Pan, J. Lewis, J. Moorhead, B. Reaves, N. Younan, R. King, M. Freund, and V. Madani, "Cybersecurity Testing of Substation Phasor Measurement Units and Phasor Data Concentrators," (CSIIRW '11), pp. 12-14, Oct. 2011.
8. Chee-Wooi Ten; Junho Hong; Chen-Ching Liu, "Anomaly Detection for Cybersecurity of the Substations," Smart Grid, IEEE Transactions on, vol. 2, no. 4, pp. 865,873, Dec. 2011
9. Y. Chen and B. Lou, "S2a: Secure smart household appliances," in Proc. 2nd ACM Conf. Data Application Security Privacy, San Antonio, TX, USA, pp. 217-228, Feb. 2012.
10. Mitchell, R.; Ing-Ray Chen, "Behavior-Rule Based Intrusion Detection Systems for Safety Critical Smart Grid Applications," Smart Grid, IEEE Transactions, vol. 4, no. 3, pp. 1254, 1263, Sept. 2013.
11. Yang, Y.; McLaughlin, K.; Sezer, S.; Littler, T.; Pranggono, B.; Brogan, P.; Wang, H. F., "Intrusion Detection System for network security in synchrophasor systems," IET International Conf., vol., no., pp. 246,252, 27-29, April, 2013.
12. Y. Zhang; L. Wang; W. Sun; Green, R. C.; Alam, M., "Distributed Intrusion Detection System in a Multi-Layer Network Architecture of Smart Grids," Smart Grid, IEEE Transactions, vol. 2, no. 4, pp. 796,808, Dec. 2011.
13. Hadeli, H.; Schierholz, R.; Braendle, M.; Tuduce, C., "Leveraging determinism in industrial control systems for advanced anomaly detection and reliable security configuration," Emerging Technologies & Factory Automation, ETFA, vol., no., pp. 1, 8, 22-25, Sept. 2009.
14. Berthier, R.; Sanders, W. H., "Specification-Based Intrusion Detection for Advanced Metering Infrastructures," Dependable Computing (PRDC), 2011 IEEE 17th Pacific Rim International Symposium on, vol., no., pp. 184,193, 12-14 Dec. 2011.
15. Valenzuela, J.; Wang, J.; Bissinger, N., "Real-Time Intrusion Detection in Power System Operations," Power Systems, IEEE Transactions on, vol. 28, no. 2, pp. 1052,1062, May, 2013.
16. M. Talebi, J. Wang, Z. Qu, "Secure Power Systems Against Malicious Cyber-Physical Data Attacks: Protection and Identification," World Academy of Science, Engineering and Technology, vol. 66, 2012.
17. Zonouz, S.; Rogers, K. M.; Berthier, R.; Bobba, R. B.; Sanders, W. H.; Overbye, T. J., "SCPSE: Security-Oriented Cyber-Physical State Estimation for Power Grid Critical Infrastructures," Smart Grid, IEEE Transactions on, vol. 3, no. 4, pp. 1790,1799, Dec. 2012.
18. G. Weimann, "Cyberterrorism: How real is the threat?" United States Institute of Peace, Washington, United States, 2004.
19. P. Anderson, "Analysis of Faulted Power Systems," IEEE Inc., 1995. Doug Westlund, "the Electric Grid Cyber-attack Surface Is Larger Than The Grid Itself", Online: http://goo. gl/MygNRz, 1995
20. Doug Westlund, "The Electric Grid Cyber-attack Surface Is Larger Than The Grid Itself", Online: http://goo. gl/WGPzqW, last access 2014.
21. Y. Aillerie; S. Kayal; J. Mennella; R. Samani; S. Sauty; L. Schmitt, "Smart Grid Deployment Requires A New End-to-end Security Approach", Online: http://goo. gl/UvliR4, June, 2013.
22. M. Hall, E. Frank, Et Al., "The Weka Data Mining Software: An Update," Sigkdd Explorations, Vol. 11, No. 1, 2009.
23. L. Breiman, "Random Forests," Machine Learning Vol. 45, No. 1, Pp. 5-32, 2001.
24. R. C. Holte, "Very Simple Classification Rules Perform Well On Most Commonly Used Datasets," Machine Learning, Vol. 11, No. 1, Pp. 63-90, 1993.
25. T. Bayes. Phil. "Trans. Of The Royal Soc. Of London", 1763.
26. P. Langley, W. Iba, And K. Thompson, "An Analysis Of Bayesian Classifiers," Aaai, Vol. 90, 1992.
27. B. Martin, "Instance-based Learning: Nearest Neighbor With Generalization"University Of Waikato, 1995.
28. J. Platt, "Sequential Minimal Optimization: A Fast Algorithm for Training Support Vector Machines," Advances in Kernel Methods-Support Vector Learning", 1998.
29. C. Cortes And V. Vapnik, "Support-Vector Networks," Machine Learning", Vol. 20, No. 3, Pp. 273-297, 1995.
30. Fürnkranz J., Widmer G., "Incremental Reduced Error Pruning, Proc. 11th Intl. Conf. On Machine Learning", Ml-94, Pp. 70-77, Rutgers University, Nj, 1994.
31. William W. Cohen, "Fast Effective Rule Induction", Proceedings of the Twelfth International Conf. On Machine Learning", Lake Tahoe, California, 1995.
32. W. Hu, Y. Liao, and V. Vemuri. "Robust Support Vector Machines for Anomaly Detection in Computer Security". Proc. International Conf. On Machine Learning And Applications, Pages 23-24, 2003.
33. C. Sinclair, L. Pierce, and S. Matzner. An Application of Machine Learning To Network Intrusion Detection. Proc. Computer Security Applications Conf., Page 371, 1999.
34. R. Perdisci, G. Gu, and W. Lee., "Using an Ensemble of One-class SVM Classifiers to Harden Payload-based Anomaly Detection Systems", Proc. International Conf. on Data Mining, pages 488-498, 2006.
35. Freund, Yoav, and Robert E. Schapire. "A decision-theoretic generalization of on-line learning and an application to boosting. " Journal of computer and system sciences 55. 1, 119-139. 1997.
36. Justin Beaver, Raymond Borges, Mark Buckner, "An Evaluation of Machine Learning Methods to Detect Malicious SCADA Communications", 13th International Conf. on Machine Learning and Applications, 2013.
37. Mississippi State University Critical Infrastructure Protection Center, "Industrial Control System Cyber Attack Data Set", Online: http://www. ece. msstate. edu/wiki/index. php/ICS-Attack-Dataset, Apr. 2014.