Developing a Hybrid Intrusion Detection System Using Data Mining for Power Systems

IEEE Transactions on Smart Grid

Volumn 6, Issue 6, 2015, Pages 3104-3113

  Pan, Shengyi ^a   Morris, Thomas ^a   Adhikari, Uttam ^a  

^a MISSISSIPPI STATE UNIVERSITY   (United States)

Author keywords

Cyber attacks; data mining; distance protection; intrusion detection system (IDS); power system; synchrophasor system

Indexed keywords

BIG DATA; COMPUTER CRIME; CRIME; DATA MINING; ELECTRIC POWER TRANSMISSION; INTRUSION DETECTION; WIDE AREA NETWORKS;

AUTOMATED APPROACH; DISTANCE-PROTECTION SCHEME; HYBRID INTRUSION DETECTION; INTRUSION DETECTION SYSTEMS; POWER TRANSMISSION SYSTEMS; PROOF OF CONCEPT; SYNCHROPHASOR MEASUREMENTS; WIDE-AREA MONITORING AND CONTROLS;

SECURITY OF DATA;

EID: 84959498649     PISSN: 19493053     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSG.2015.2409775     Document Type: Article

References (24)

1. A Systems View of the Modern Grid, Nat. Energy Technol. Lab. (NETL), Morgantown, WV, USA, 2007. [Online]. Available: https://www.smartgrid.gov/sites/default/files/pdfs/a-systems-view-of-the-modern-grid.pdf
2. NERC Standards Critical Infrastructure Protection CIP-002-3 Through CIP-009-3, North American Elect. Rel. Corp., Atlanta, GA, USA, 2010. [Online]. Available: http://www.nerc.com/page.phpcid=2|20
3. NISTIR 7628 Guidelines for Smart Grid Cyber Security: Vol. 1, Smart Grid Cybersecurity Strategy, Architecture and High-Level Requirements, Nat. Inst. Stand. Technol., Gaithersburg, MD, USA, 2014. [Online]. Available: http://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7628r1.pdf
4. D. Powner and D. Trimble, "Electricity grid modernization: Progress being made on cyber-security guidelines, but key challenges remain to be addressed," Gov. Acc. Office, Washington, DC, USA, Tech. Rep. GAO-11-117, 2011. [Online]. Available: http://www.gao.gov/new.items/d11117.pdf
5. N. Falliere, L. O'Murchu, E. Chien, "W32.Stuxnet dossier, V 1.4," Symantec Corp., Mountain View, CA, USA, Tech. Rep. MS10-046, 2011. [Online]. Available: http://www.symantec.com/content/en/us/enterprise/media/security-response/whitepapers/w32-stuxnet-dossier.pdf
6. C. W. Ten, J. Hong, C. C. Liu, "Anomaly detection for cybersecurity of the substations," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 865-873, Dec. 2011.
7. Y. Chen and B. Lou, "S2A: Secure smart household appliances," in Proc. 2nd ACM Conf. Data Appl. Sec. Privacy, San Antonio, TX, USA, 2012, pp. 217-228.
8. R. Mitchell and I.-R. Chen, "Behavior-rule based intrusion detection systems for safety critical smart grid applications," IEEE Trans. Smart Grid, vol. 4, no. 3, pp. 1254-1263, Sep. 2013.
9. Y. Yang et al., "Intrusion detection system for network security in synchrophasor systems," in Proc. IET Int. Conf. Inf. Commun. Technol., Beijing, China, 2013, pp. 246-252.
10. Y. Zhang, L. Wang, W. Sun, R. C. Green, M. Alam, "Distributed intrusion detection system in a multi-layer network architecture of smart grids," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 796-808, Dec. 2011.
11. H. Hadeli, R. Schierholz, M. Braendle, C. Tuduce, "Leveraging determinism in industrial control systems for advanced anomaly detection and reliable security configuration," in Proc. IEEE Conf. Emerg. Technol. Factory Autom., Mallorca, Spain, 2009, pp. 1-8.
12. R. Berthier and W. H. Sanders, "Specification-based intrusion detection for advanced metering infrastructures," in Proc. IEEE 17th Pac. Rim Int. Symp. Depend. Comput., Pasadena, CA, USA, 2011, pp. 184-193.
13. J. Valenzuela, J. Wang, N. Bissinger, "Real-time intrusion detection in power system operations," IEEE Trans. Power Syst., vol. 28, no. 2, pp. 1052-1062, May 2013.
14. M. Talebi, J. Wang, Z. Qu, "Secure power systems against malicious cyber-physical data attacks: Protection and identification," World Acad. Sci. Eng. Technol., vol. 6, no. 6, pp. 112-119, 2012. [Online]. Available: http://2waset.org/publications/6605/secure-power-systems-againstmalicious-cyber-physical-data-attacks-protection-and-identification
15. W. Lee, S. Stolfo, K. Mok, "A data mining framework for building intrusion detection models," in Proc. IEEE Symp. Sec. Privacy, Oakland, CA, USA, 1999, pp. 120-132.
16. R. Agrawal and R. Srikant, "Mining sequential patterns," in Proc. 11th Int. Conf. Data Eng., Taipei, Taiwan, 1995, pp. 3-14.
17. J. L. Lin, X. S. Wang, S. Jajodia, "Abstraction-based misuse detection: High-level specifications and adaptable strategies," in Proc. 11th IEEE Comput. Sec. Found. Workshop, Rockport, MA, USA, 1998, pp. 190-201.
18. F. Lin, C. Chiu, S. Wu, "Using Bayesian networks for discovering temporal-state transition patterns in hemodialysis," in Proc. 35th Annu. Hawaii Int. Conf. Syst. Sci., Big Island, HI, USA, 2002, pp. 1995-2002.
19. J. Han, M. Kamber, J. Pei, Data Mining Concepts and Techniques, 3rd ed. Burlington, MA, USA: Morgan Kaufmann, 2012.
20. H. Saadat, Power System Analysis. New York, NY, USA: McGraw-Hill, 2010.
21. R. Nylén, "Auto-reclosing," ASEA J., vol. 52, no. 6, pp. 127-132, 1979.
22. R. Borges et al., "Machine learning for power system disturbance and cyber-attack discrimination," in Proc. Int. Symp. Resil. Control Syst., Denver, CO, USA, 2014, pp. 1-8.
23. R. Amgai, J. Shi, S. Abdelwahed, "An integrated lookahead control-based adaptive supervisory framework for autonomic power system applications," Int. J. Elect. Power Energy Syst., vol. 63, pp. 824-835, Dec. 2014.
24. G. Coates, K. Hopkinson, S. Graham, S. Kurkowski, "Collaborative, trust-based security mechanisms for a regional utility intranet," IEEE Trans. Power Syst., vol. 23, no. 3, pp. 831-844, Aug. 2008.