Data-stream-based intrusion detection system for advanced metering infrastructure in smart grid: A feasibility study

IEEE Systems Journal

Volumn 9, Issue 1, 2015, Pages 31-44

  Faisal, Mustafa Amir ^a,b   Aung, Zeyar ^a   Williams, John R ^c   Sanchez, Abel ^c  

^a KHALIFA UNIVERSITY   (United Arab Emirates)

^b The University of Texas at Dallas   (United States)

^c MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Advanced metering infrastructure (AMI); data stream mining; intrusion detection system (IDS); smart grid (SG)

Indexed keywords

ADVANCED METERING INFRASTRUCTURES; ALGORITHMS; AUTHENTICATION; COMPUTER CRIME; CONCENTRATION (PROCESS); DATA COMMUNICATION SYSTEMS; DATA MINING; INTRUSION DETECTION; MOBILE SECURITY; SMART METERS; SMART POWER GRIDS;

DATA CONCENTRATORS; DATA STREAM MINING; FEASIBILITY ANALYSIS; FEASIBILITY STUDIES; INTRUSION DETECTION SYSTEMS; MEMORY REQUIREMENTS; SECURITY METHODS; SMART GRID;

SECURITY OF DATA;

EID: 85028151153     PISSN: 19328184     EISSN: 19379234     Source Type: Journal    
DOI: 10.1109/JSYST.2013.2294120     Document Type: Article

References (38)

1. G. J. FitzPatrick and D. A. Wollman, "NIST interoperability framework and action plans, " in Proc. IEEE Power Energy Soc. Gen. Meet., 2010, pp. 1-4.
2. X. M. Bai, J. X. Meng, and N. H. Zhu, "Functional analysis of advanced metering infrastructure in smart grid, " in Proc. Int. Conf. POWERCON, 2010, pp. 1-4.
3. D. Li, Z. Aung, J. R. Williams, and A. Sanchez, "Efficient authentication scheme for data aggregation in smart grid with fault tolerance and fault diagnosis, " in Proc. IEEE Power Energy Soc. Conf. ISGT, 2012, pp. 1-8.
4. F. M. Cleveland, "Cyber security issues for advanced metering infrastructure (AMI), " in Proc. IEEE Power Energy Soc. Gen. Meet.-Convers. Del. Electr. Energy 21st Century, 2008, pp. 1-5.
5. R. Berthier, W. H. Sanders, and H. Khurana, "Intrusion detection for advanced metering infrastructures: Requirements and architectural directions, " in Proc. 1st IEEE Int. Conf. SmartGridComm, 2010, pp. 350-355.
6. R. Berthier and W. H. Sanders, "Specification-based intrusion detection for advanced metering infrastructures, " in Proc. 17th IEEE PRDC, 2011, pp. 184-193.
7. P. P. Rodrigues and J. Gama, "Holistic distributed stream clustering for smart grids, " in Proc. 2012 Workshop UDM, 2012, pp. 18-22.
8. Open Public Extended Network Metering, 2009. [Online]. Available: http://www.openmeter.com/
9. Massive Online Analysis, release 2012.03, 2012. [Online]. Available: http://moa.cs.waikato.ac.nz
10. A. Bifet, G. Holmes, B. Pfahringer, P. Kranen, H. Kremer, T. Jansen, and T. Seidl, "MOA: Massive Online Analysis, a framework for stream classification and clustering, " in JMLR Workshop Conf. Proc., Workshop Appl. Pattern Anal., 2010, vol. 11, pp. 44-50.
11. M. A. Faisal, Z. Aung, J. Williams, and A. Sanchez, "Securing advanced metering infrastructure using intrusion detection system with data stream mining, " in Proc. PAISI, 2012, vol. 7299, pp. 96-111.
12. R. Shein, "Security measures for advanced metering infrastructure components, " in Proc. APPEEC, 2010, pp. 1-3.
13. Data Concentrator in AMI, 2011. [Online]. Available: http://www. meworks.net/userfile/44670/DataConcentratorforAdvancedMetering Infrastructure(AMI)-1.pdf
14. N. C. N. Chu, A.Williams, R. Alhajj, and K. Barker, "Data stream mining architecture for network intrusion detection, " in Proc. IEEE Int. Conf. IRI, 2004, pp. 363-368.
15. S. H. Oh, J. S. Kang, Y. C. Byun, G. L. Park, and S. Y. Byun, "Intrusion detection based on clustering a data stream, " in Proc. 3rd ACIS ICSEMA, 2005, pp. 220-227.
16. Q. H. Liu, F. Zhaoi, and Y. B. Zhao, "A real-time architecture for NIDS based on sequence analysis, " in Proc. ICMLC, 2005, vol. 3, pp. 1893-1896.
17. M. U. Khan, "Anomaly detection in data streams using fuzzy logic, " in Proc. ICICT, 2009, pp. 167-174.
18. Z. Qun and H. Wen-Jie, "Research on data mining technologies applying intrusion detection, " in Proc. IEEE ICEMMS, 2010, pp. 230-233.
19. Y. Zhang, L. Wang, W. Sun, R. C. Green, and M. Alam, "Distributed intrusion detection system in a multi-layer network architecture of smart grids, " IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 796-808, 2011.
20. S. Wu and Y. Chen, "An embedded intrusion detection system model for application program, " in Proc. IEEE PACIIA, 2008, vol. 2, pp. 910-912.
21. D. Li, Z. Aung, J. R.Williams, and A. Sanchez, "P3: Privacy preservation protocol for appliance control application, " in Proc. 3rd IEEE Int. Conf. SmartGridComm, 2012, pp. 294-299.
22. M. Costache, V. Tudor, M. Almgren, M. Papatriantafilou, and C. Saunders, "Remote control of smart meters: Friend or foe?" in Proc. 7th EC2ND, 2011, pp. 1-8.
23. D. Brzeziñski and J. Stefanowski, "Accuracy updated ensemble for data streams with concept drift, " in Proc. 6th Int. Conf. HAIS Part II, 2011, pp. 155-163.
24. I. liobaitë, A. Bifet, B. Pfahringer, and G. Holmes, "Active learning with evolving streaming data, " in Proc. ECML-PKDD Part III, 2011, pp. 597-612.
25. A. Bifet, G. Holmes, and B. Pfahringer, "Leveraging bagging for evolving data streams, " in Proc. ECML-PKDD Part I, 2010, pp. 135-150.
26. A. Bifet, E. Frank, G. Holmes, B. Pfahringer, M. Sugiyama, and Q. Yang, "Accurate ensembles for data streams: Combining restricted Hoeffding trees using stacking, " in Proc. 2nd ACML, 2010, pp. 225-240.
27. A. Bifet and R. Gavaldà, "Learning from time-changing data with adaptive windowing, " in Proc. SIAM Int. Conf. SDM, 2007, pp. 443-448.
28. A. Bifet, G. Holmes, B. Pfahringer, R. Kirkby, and R. Gavaldà, "New ensemble methods for evolving data streams, " in Proc. 15th ACM SIGKDD Int. Conf. KDD, 2009, pp. 139-148.
29. J. Gama, P. Medas, G. Castillo, and P. Rodrigues, "Learning with drift detection, " in Proc. SBIA, 2004, pp. 286-295.
30. M. Baena-Garcià, J. D. Campo-Àvila, R. Fidalgo, A. Bifet, R. Gavaldà, and R. Morales-bueno, "Early drift detection method, " in Proc. 4th IWKDDS, 2006, pp. 77-86.
31. G. Hulten, L. Spencer, and P. Domingos, "Mining time-changing data streams, " in Proc. 7th ACM SIGKDD Int. Conf. KDD, 2001, pp. 97-106.
32. N. Oza and S. Russell, "Online bagging and boosting, " in Proc. 8th Int. Workshop AISTATS, 2001, pp. 105-112.
33. KDD Cup 1999 data, 1999. [Online]. Available: http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html
34. P. Li, X. Wu, and X. Hu, "Learning from concept drifting data streams with unlabeled data, " in Proc. 24th AAAI, 2010, pp. 1945-1946.
35. DARPA Intrusion Detection Evaluation, 1998. [Online]. Available: http://www.ll.mit.edu/mission/communications/CST/darpa.html
36. M. Tavallaee, E. Bagheri, W. Lu, and A. A. Ghorbani, "A detailed analysis of the KDD Cup 99 data set, " in Proc. IEEE Symp. CISDA, 2009, pp. 1-6.
37. J. Cohen, "A coefficient of agreement for nominal scales, " Educ. Psychol. Meas., vol. 20, pp. 37-46, 1960.
38. GoGird Billing Model, 2013. [Online]. Available: https://wiki.gogrid. com/wiki/index.php/Billing-Model