KIT | KIT-Bibliothek | Impressum | Datenschutz

Detection of DoS Attacks Using ARFIMA Modeling of GOOSE Communication in IEC 61850 Substations

Elbez, Ghada; Keller, Hubert B.; Bohara, Atul; Nahrstedt, Klara; Hagenmeyer, Veit

Abstract (englisch):
Integration of Information and Communication Technology (ICT) in modern smart grids (SGs) offers many advantages including the use of renewables and an effective way to protect, control and monitor the energy transmission and distribution. To reach an optimal operation of future energy systems, availability, integrity and confidentiality of data should be guaranteed. Research on the cyber-physical security of electrical substations based on IEC 61850 is still at an early stage. In the present work, we first model the network traffic data in electrical substations, then, we present a statistical Anomaly Detection (AD) method to detect Denial of Service (DoS) attacks against the Generic Object Oriented Substation Event (GOOSE) network communication. According to interpretations on the self-similarity and the Long-Range Dependency (LRD) of the data, an Auto-Regressive Fractionally Integrated Moving Average (ARFIMA) model was shown to describe well the GOOSE communication in the substation process network. Based on this ARFIMA-model and in view of cyber-physical security, an effective model-based AD method is developed and analyzed. Two variants of the statistical AD considering statistical hypothesis testing based on the Generalized Likelihood Ratio Test (GLRT) and the cumulative sum (CUSUM) are presented to detect flooding attacks that might affect the availability of the data. ... mehr

Open Access Logo

DOI: 10.3390/en13195176
Zugehörige Institution(en) am KIT Institut für Automation und angewandte Informatik (IAI)
Publikationstyp Zeitschriftenaufsatz
Publikationsjahr 2020
Sprache Englisch
Identifikator ISSN: 1996-1073
KITopen-ID: 1000124513
HGF-Programm 34.15.01 (POF III, LK 01)
Mineralische Konstruktionsmaterialien
Erschienen in Energies
Band 13
Heft 19
Seiten 5176
Vorab online veröffentlicht am 05.10.2020
KIT – Die Forschungsuniversität in der Helmholtz-Gemeinschaft
KITopen Landing Page