A Collaborative Intrusion Detection Mechanism Against False Data Injection Attack in Advanced Metering Infrastructure

IEEE Transactions on Smart Grid

Volumn 6, Issue 5, 2015, Pages 2435-2443

  Liu, Xiaoxue ^a   Zhu, Peidong ^a   Zhang, Yan ^b   Chen, Kan ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

^b UNIVERSITY OF OSLO   (Norway)

Author keywords

Advanced metering infrastructure (AMI); collaborative intrusion detection; colored Petri net; smart grid; smart meters; spying domain; threat model

Indexed keywords

ADVANCED METERING INFRASTRUCTURES; DIGITAL STORAGE; ELECTRIC POWER TRANSMISSION NETWORKS; INTRUSION DETECTION; MERCURY (METAL); PETRI NETS; SMART METERS;

COLORED PETRI NETS; FALSE DATA INJECTION ATTACKS; INFORMATION FLOWS; NUMERICAL RESULTS; SMART GRID; SPYING DOMAIN; STORAGE RESOURCES; THREAT MODELING;

SMART POWER GRIDS;

EID: 85027947174     PISSN: 19493053     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSG.2015.2418280     Document Type: Article

References (45)

1. J. Zhong, R. Zheng, and W. Yang, "Construction of smart grid at information age," Power Syst. Technol., vol. 33, no. 13, pp. 12-18, 2009.
2. Y. Yu, "Technical composition of smart grid and its implementation sequence," South. Power Syst. Technol., vol. 3, no. 2, pp. 1-5, 2009.
3. W. Wang, Y. Xu, and M. Khanna, "A survey on the communication architectures in smart grid," Comput. Netw., vol. 55, no. 15, pp. 3604-3629, 2011.
4. R. David and H. Alla, Discrete, Continuous, and Hybrid Petri Nets. Berlin, Germany: Springer-Verlag, 2005, pp. 289-294.
5. K. Jensen and L. Kristensen, Coloured Petri Nets: Modelling and Validation of Concurrent Systems. Berlin, Germany: Springer-Verlag, 2009, pp. 193-198.
6. J. McDermott, "Attack net penetration testing," in Proc. Workshop New Security Paradigms (NSPW), Cork, Ireland, 2000, pp. 15-21.
7. G. Dalton, R. Mills, J. Colombi, and R. Raines, "Analyzing attack trees using generalized stochastic Petri nets," in Proc. IEEE Workshop Inf. Assur., West Point, NY, USA, 2006, pp. 116-123.
8. R. Wu, W. Li, and H. Huang, "An attack modeling based on hierarchical colored Petri nets," in Proc. IEEE Int. Conf. Comput. Elect. Eng. (ICCEE), Phuket, Thailand, 2008, pp. 918-921.
9. K. Schneider, C.-C. Liu, and J.-P. Paul, "Assessment of interactions between power and telecommunications infrastructures," IEEE Trans. Power Syst., vol. 21, no. 3, pp. 1123-1130, Aug. 2006.
10. O. Gursesli and A. Desrochers, "Modeling infrastructure interdependencies using Petri nets," in Proc. IEEE Int. Conf. Syst., vol. 2. Washington, DC, USA, 2003, pp. 1506-1512.
11. J.-C. Laprie, K. Kanoun, and M. Kaaniche, "Modelling interdependencies between the electricity and information infrastructures," in Proc. 26th Int. Conf. Comput. Safety Rel. Security (SAFECOMP), Nuremberg, Germany, 2007, pp. 54-67.
12. V. Calderaro, C. N. Hadjicostis, A. Piccolo, and P. Siano, "Failure identification in smart grids based on petri net modeling," IEEE Trans. Ind. Electron., vol. 58, no. 10, pp. 4613-4623, Sep. 2011.
13. T. M. Chen, J. C. Sanchez-Aarnoutse, and J. Buford, "Petri net modeling of cyber-physical attacks on smart grid," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 741-749, Apr. 2011.
14. R. Berthier and W. H. Sanders, "Specification-based intrusion detection for advanced metering infrastructures," in Proc. Pac. Rim Int. Symp. Depend. Comput. (PRDC), Pasadena, CA, USA, 2011, pp. 184-193.
15. M. LeMay, G. Gross, C. A. Gunter, and S. Garg, "Unified architecture for large-scale attested metering," in Proc. 40th Annu. Hawii Int. Conf. Syst. Sci. (HICCS), Waikoloa, HI, USA, 2007, pp. 126-135.
16. F. M. Tabrizi and K. Pattabiraman, "A model-based intrusion detection system for smart meters," in Proc. IEEE 15th Int. Symp. High-Assur. Syst. Eng. (HASE), Miami Beach, FL, USA, 2014, pp. 17-24.
17. M. A. Faisal, Z. Aung, J. R. Williams, and A. Sanchez, "Securing advanced metering infrastructure using intrusion detection system with data stream mining," in Proc. Pac. Asia Workshop Intell. Security Informat., Kuala Lumpur, Malaysia, 2012, pp. 96-111.
18. Y. Chongyi, Principles and Applications of Petri Net, Beijing, China: Electron. Ind. Press, 2005, p. 16.
19. J. Peterson, "Petri nets," ACM Comput. Surv., vol. 9, pp. 223-252, Sep. 1977.
20. M. Diaz, Petri Nets: Fundamental Models, Verification and Applications. Hoboken, NJ, USA: Wiley, 2009.
21. V. Kordic, Petri Net Theory and Applications. Vienna, Austria: I-Tech Educ., 2008.
22. K. Jensen, "Coloured Petri nets," in Proc. IEE Colloq. Discrete Event Syst. New Challenge Intell. Control Syst., London, U. K., May 1993, pp. 5. 1-5. 3.
23. F. M. Cleveland, "Cyber security issues for advanced metering infrastructure (AMI)," in Proc. IEEE Power Energy Soc. Gen. Meeting Convers., Pittsburgh, PA, USA, 2008, pp. 1-5.
24. H. Khurana, M. Hadley, L. Ning, and D. Frincke, "Smart-grid security issues," IEEE Security Privacy, vol. 8, no. 1, pp. 81-85, Jan. /Feb. 2010.
25. T. Chen, "Survey of cyber security issues in smart grids," Proc. SPIE Cyber Security Situation Manage. Impact Assess. II Vis. Anal. Homeland Defense Security II, vol. 7709, Apr. 2010, Art. ID 77090D.
26. AMI System Security Requirements v1. 01. (Dec. 2008). AMI Security Acceleration Project AMI-SEC Task Force (AMI-SEC-ASAP). Online. Available: http://www. oe. energy. gov/Documentsand-Media/ 14AMI-System-Security-Requirements. pdf
27. Security Profile for Advanced Metering Infrastructure. (Dec. 2009). Advanced Security Acceleration Project (ASAP-SG). Knoxville, TN, USA. [Online]. Available: http://osgug. ucaiug. org/utilisec/amisec/ Shared%20Documents/AMI%20Security%20Profile%20(ASAPSG)/ AMI%20Security%20Profile%20-%20v1-0. pdf
28. W. Sikora, M. Carpenter, and J. Wright, Smart Grid and AMI Security Concerns, InGuardians Ind. Defend., Washington, DC, USA, 2009, pp. 88-90. [Online]. Available: http://inguardians. com/pubs/ Smart-Grid-AMI-Security-Concerns-20090723. pdf
29. J. Wright (InGuardians), (2010). Smart Meters Have Security Holes.
30. . Available: http://www. msnbc. msn. com/id/36055667
31. M. Davis, "Smart grid device security," presented at BlackHat, Las Vegas, NV, USA, 2009. [Online]. Available: http://www. blackhat. com/presentations/com/presentations/bh-usa-09/ MDAVIS/BHUSA09-Davis-AMI-SLIDES. pdf
32. A. Metke and R. Ekl, "Smart grid security technology," in Proc. Innov. Smart Grid Technol, Gaithersburg, MD, USA, 2010, pp. 1-7.
33. A. Hamlyn et al., "Computer network security management and authentication of smart grids operations," in Proc. IEEE Power Energy Soc. Gen. Meeting Convers., Pittsburgh, PA, USA, 2008, pp. 1-7.
34. S. McLaughlin, D. Podkuiko, and P. McDaniel, "Energy theft in the advanced metering infrastructure," in Proc. 4th Int. Workshop Crit. Inf. Infrastruct. Security, Bonn, Germany, Sep. 2009, pp. 176-187.
35. T. A. Hawk. (Aug. 2014). Smart Grid Security. [Online]. Available: http://wnss. sv. cmu. edu/courses/14814/s12/files/adHawks- 14814s12-22. pdf
36. E. Hossain, Z. Han, and H. V. Poor, Smart Grid Communications and Networking. Cambridge, U. K. : Cambridge Univ. Press, 2012, p. 340.
37. R. Berthier, W. H. Sanders, and H. Khurana, "Intrusion detection for advanced metering infrastructures: Requirements and architecture directions," in Proc. IEEE Smart Grid Commun., Gaithersburg, MD, USA, 2010, pp. 350-355.
38. D. Grochocki et al., "AMI threats, intrusion detection requirements and deployment recommendations," in Proc. IEEE 3rd Int. Conf. Smart Grid Commun., Tainan, Taiwan, 2012, pp. 395-400.
39. S. McLaughlin, B. Holbert, S. Zonouz, and R. Berthier, "AMIDS: A multi-sensor energy theft detection framework for advanced metering infrastructures," in Proc. IEEE Smart Grid Commun. (SmartGridComm), Tainan, Taiwan, 2012, pp. 350-355.
40. K. Scarfone and P. Mell, "Guide to intrusion detection and prevention systems (IDPS)," U. S. Dept. Commer., Nat. Inst. Stand. Technol., Gaithersburg, MD, USA, Tech. Rep. 800-94, 2007. [Online]. Available: http://csrc. nist. gov/publications/nistpubs/800-94/SP800-94. pdf
41. H. Debar, M. Dacier, and A. Wespi, "A revised taxonomy for intrusiondetection systems," Ann. Telecommun., vol. 55, no. 7, pp. 361-378, 2000.
42. T. H. Ptacek and T. N. Newsham, "Insertion, evasion, and denial of service: Eluding network intrusion detection," DTIC Document DTIC-IA, Secure Netw. Inc., Syracuse, NY, USA, 1998.
43. C. Cowan et al., "StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks," in Proc. 7th Conf. USENIX Security Symp. vol. 7. Berkeley, CA, USA, 1998, pp. 63-78.
44. G. Richarte, (2002). Four Different Tricks to Bypass StackShield and StackGuard Protection. [Online]. Available: http://www1. corest. com/files/files/11/StackGuardPaper. pdf
45. S. J. Templeton and K. Levitt, "A requires/provides model for computer attacks," in Proc. Workshop New Security Paradigms, Cork, Ireland, 2000, pp. 31-38.