Improving SCADA security of a local process with a power grid model

Justyna Joanna Chromik; Anne Katharina Ingrid Remke; Boudewijn R.H.M. Haverkort

doi:10.14236/ewic/ICS2016.13

Improving SCADA security of a local process with a power grid model

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

306 Downloads (Pure)

Abstract

Security of networks controlling smart grids is an important subject. The shift of the power grid towards a smart grid results in more distributed control functions, while intrusion detection of the control network mostly remains centrally based. Moreover, existing local (host-based) intrusion detection systems do not yet take into account the physical process itself. Therefore, this work proposes a local intrusion detection system, which considers the outcome of control commands on the physical process. Using two scenarios we explain the benefits of extending the current security measures with a local intrusion detection.

Original language	Undefined
Title of host publication	Proceedings of the 4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016
Place of Publication	UK
Publisher	BCS Learning & Development Ltd.
Pages	114-123
Number of pages	10
ISBN (Print)	1477-9358
DOIs	https://doi.org/10.14236/ewic/ICS2016.13
Publication status	Published - Aug 2016
Event	4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016 - Belfast, United Kingdom Duration: 23 Aug 2016 → 25 Aug 2016 Conference number: 4

Publication series

Name	Electronic Workshops in Computing
Publisher	BCS Learning & Development Ltd.
ISSN (Print)	1477-9358

Conference

Conference	4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016
Abbreviated title	ICS-CSR
Country/Territory	United Kingdom
City	Belfast
Period	23/08/16 → 25/08/16

Keywords

process-awareness
METIS-318499
IR-101363
model based intrusion detection
EWI-27159
SCADA security

Access to Document

10.14236/ewic/ICS2016.13

Cite this

@inproceedings{c83b522550f64dd696c1c117dd09b594,

title = "Improving SCADA security of a local process with a power grid model",

abstract = "Security of networks controlling smart grids is an important subject. The shift of the power grid towards a smart grid results in more distributed control functions, while intrusion detection of the control network mostly remains centrally based. Moreover, existing local (host-based) intrusion detection systems do not yet take into account the physical process itself. Therefore, this work proposes a local intrusion detection system, which considers the outcome of control commands on the physical process. Using two scenarios we explain the benefits of extending the current security measures with a local intrusion detection.",

keywords = "process-awareness, METIS-318499, IR-101363, model based intrusion detection, EWI-27159, SCADA security",

author = "Chromik, \{Justyna Joanna\} and Remke, \{Anne Katharina Ingrid\} and Haverkort, \{Boudewijn R.H.M.\}",

note = "eemcs-eprint-27159 ; 4th International Symposium for ICS \& SCADA Cyber Security Research, ICS-CSR 2016 ; Conference date: 23-08-2016 Through 25-08-2016",

year = "2016",

month = aug,

doi = "10.14236/ewic/ICS2016.13",

language = "Undefined",

isbn = "1477-9358",

series = "Electronic Workshops in Computing",

publisher = "BCS Learning \& Development Ltd.",

pages = "114--123",

booktitle = "Proceedings of the 4th International Symposium for ICS \& SCADA Cyber Security Research, ICS-CSR 2016",

}

Chromik, JJ, Remke, AKI & Haverkort, BRHM 2016, Improving SCADA security of a local process with a power grid model. in Proceedings of the 4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016. Electronic Workshops in Computing, BCS Learning & Development Ltd., UK, pp. 114-123, 4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016, Belfast, United Kingdom, 23/08/16. https://doi.org/10.14236/ewic/ICS2016.13

Improving SCADA security of a local process with a power grid model. / Chromik, Justyna Joanna; Remke, Anne Katharina Ingrid ; Haverkort, Boudewijn R.H.M.
Proceedings of the 4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016. UK: BCS Learning & Development Ltd., 2016. p. 114-123 (Electronic Workshops in Computing).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Improving SCADA security of a local process with a power grid model

AU - Chromik, Justyna Joanna

AU - Remke, Anne Katharina Ingrid

AU - Haverkort, Boudewijn R.H.M.

N1 - Conference code: 4

PY - 2016/8

Y1 - 2016/8

N2 - Security of networks controlling smart grids is an important subject. The shift of the power grid towards a smart grid results in more distributed control functions, while intrusion detection of the control network mostly remains centrally based. Moreover, existing local (host-based) intrusion detection systems do not yet take into account the physical process itself. Therefore, this work proposes a local intrusion detection system, which considers the outcome of control commands on the physical process. Using two scenarios we explain the benefits of extending the current security measures with a local intrusion detection.

AB - Security of networks controlling smart grids is an important subject. The shift of the power grid towards a smart grid results in more distributed control functions, while intrusion detection of the control network mostly remains centrally based. Moreover, existing local (host-based) intrusion detection systems do not yet take into account the physical process itself. Therefore, this work proposes a local intrusion detection system, which considers the outcome of control commands on the physical process. Using two scenarios we explain the benefits of extending the current security measures with a local intrusion detection.

KW - process-awareness

KW - METIS-318499

KW - IR-101363

KW - model based intrusion detection

KW - EWI-27159

KW - SCADA security

U2 - 10.14236/ewic/ICS2016.13

DO - 10.14236/ewic/ICS2016.13

M3 - Conference contribution

SN - 1477-9358

T3 - Electronic Workshops in Computing

SP - 114

EP - 123

BT - Proceedings of the 4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016

PB - BCS Learning & Development Ltd.

CY - UK

T2 - 4th International Symposium for ICS & SCADA Cyber Security Research, ICS-CSR 2016

Y2 - 23 August 2016 through 25 August 2016

ER -