首页> 外文会议>IEEE Pacific Rim International Symposium on Dependable Computing >SeReCP: A Secure and Reliable Communication Platform for the Smart Grid
【24h】

SeReCP: A Secure and Reliable Communication Platform for the Smart Grid

机译:SeReCP:智能电网的安全可靠的通信平台

获取原文

摘要

The management of a complex cyber-pbysical system such as the Smart Grid (SG) requires responsive, scalable nod high-bandwidth communication, which is often beyond the capabilities of the classical closed communication networks of the power grid. Consequently, the use of scalable public IPbased networks is increasingly beingadvocated. However, a direct consequence of the use of public networks is the exposure of the SG to varied reliability/seeurity risks, e.g., distributed denialot-serviee (DDoS). Thus the need exists for new lightweight mechanisms that can provide both cost-effective communication along with proactive DDoS attaek proteetion. We fill this gap by proposing a novel approach termed as SeReCP, which leverages: (1) a semi-trusted P2P-based publish-subseribe (PUb-sub) system providing a proaetive countermeasure for DDoS attacks nod secure group communications by aid of a group key management system, (2) a data diffusion mechanism that sustains the network availability in the case of both raodomly sweeping nod targeted DDoS attacks on pub-sub brokers, nod (3) a multi-boming-based fast recovery mecbaoism for detecting nod requesting the dropped paekets, thus paving the way for meeting the stringent latency requirements of SG applications. Our evaluation on a real testbed demonstrates that SeReCP provides the required seeurity nod availability for SG applications with up to 30% failures of the pub-sub brokers. Overall, we sbow that SeReCP belps enable the secure use of public network based communication for safetycritical cyber-pbysical systems such as the SG.
机译:诸如智能电网(SG)之类的复杂的电子网络系统的管理需要响应性强,可扩展的点头高带宽通信,这通常超出了传统的电网封闭通信网络的能力。因此,越来越多地提倡使用可扩展的基于公共IP的网络。但是,使用公共网络的直接后果是SG暴露于各种可靠性/安全性风险中,例如分布式Denialot-Serviee(DDoS)。因此,需要新的轻量级机制,该机制既可以提供具有成本效益的通信,又可以提供主动的DDoS攻击防护。我们通过提出一种称为SeReCP的新颖方法来填补这一空白,该方法利用:(1)半信任的基于P2P的发布-订阅(PUb-sub)系统,为DDoS攻击提供预防性对策,并借助安全组通信进行点对点组密钥管理系统;(2)一种数据扩散机制,在对发布订阅代理进行随机性的Nod定向Nod DDoS攻击时,可维持网络可用性; Nod(3)一种用于检测Nod的基于多目标的快速恢复机制请求放下踏板,从而为满足SG应用程序的严格延迟要求铺平了道路。我们在真实测试床上的评估表明,SeReCP为SG应用程序提供了所需的透明性点可用性,而发布-代理经纪人的故障率高达30%。总体而言,我们认为SeReCP belps可以将基于公共网络的通信安全地用于安全关键的网络专用系统(例如SG)。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号