面向电力网络的多属性SCADA入侵检测

Multi-Attribute SCADA Intrusion Detection for Power Network

电力系统网络中监控和数据采集系统(SCADA)的互联性和复杂性的增加使系统暴露在许多潜在的漏洞中。研究提出了一种基于SCADA的入侵检测系统(IDS)新方法。该系统分析多个属性,以减轻各种网络攻击威胁。多属性IDS包括一个异构的白名单和基于行为的概念,以使SCADA网络系统更加安全。研究还提出了一种基于IDS的多层网络安全框架,以保护智能电网中的SCADA网络安全,而不影响正常数据的可用性。此外,研究还提出了一种基于SCADA的网络安全试验台,对模拟攻击进行了研究,并对该方法进行了验证。

The increased interconnectivity and complexity of Supervisory Control and Data Acquisition（SCADA）systems in power system networks has exposed the systems to a multitude of potential vulnerabilities.In this research we present a novel approach for a next generation SCADA-specific Intrusion Detection System（IDS）.The proposed system analyses multiple attributes in order to mitigate varied cyberattacks threats.The multi-attribute IDS comprises a heterogeneous whitelist and behavior-based concept in order to make SCADA cyber systems more secure.This research also proposes a multilayer cyber-security framework based on IDS for protecting SCADA cyber-security in Smart Grids without compromising the availability of normal data.In addition,this research presents a SCADA-specific cyber-security test-bed to investigate simulated attacks and which has been used in the paper to validate the proposed approach.