首页> 美国卫生研究院文献>Sensors (Basel Switzerland) >ARIES: A Novel Multivariate Intrusion Detection System for Smart Grid
【2h】

ARIES: A Novel Multivariate Intrusion Detection System for Smart Grid

机译:白羊座:一种用于智能电网的新型多变量入侵检测系统

代理获取
本网站仅为用户提供外文OA文献查询和代理获取服务,本网站没有原文。下单后我们将采用程序或人工为您竭诚获取高质量的原文,但由于OA文献来源多样且变更频繁,仍可能出现获取不到、文献不完整或与标题不符等情况,如果获取不到我们将提供退款服务。请知悉。

摘要

The advent of the Smart Grid (SG) raises severe cybersecurity risks that can lead to devastating consequences. In this paper, we present a novel anomaly-based Intrusion Detection System (IDS), called ARIES (smArt gRid Intrusion dEtection System), which is capable of protecting efficiently SG communications. ARIES combines three detection layers that are devoted to recognising possible cyberattacks and anomalies against (a) network flows, (b) Modbus/Transmission Control Protocol (TCP) packets and (c) operational data. Each detection layer relies on a Machine Learning (ML) model trained using data originating from a power plant. In particular, the first layer (network flow-based detection) performs a supervised multiclass classification, recognising Denial of Service (DoS), brute force attacks, port scanning attacks and bots. The second layer (packet-based detection) detects possible anomalies related to the Modbus packets, while the third layer (operational data based detection) monitors and identifies anomalies upon operational data (i.e., time series electricity measurements). By emphasising on the third layer, the ARIES Generative Adversarial Network (ARIES GAN) with novel error minimisation functions was developed, considering mainly the reconstruction difference. Moreover, a novel reformed conditional input was suggested, consisting of random noise and the signal features at any given time instance. Based on the evaluation analysis, the proposed GAN network overcomes the efficacy of conventional ML methods in terms of Accuracy and the F1 score.
机译:智能电网(SG)的出现引发了严格的网络安全风险,可能导致破坏性后果。在本文中,我们提出了一种新的基于异常的入侵检测系统(IDS),称为白羊座(智能电网入侵检测系统),其能够有效地保护SG通信。白羊座结合了三个检测层,该检测层致力于识别可能的网络图攻击和反对(a)网络流,(b)Modbus /传输控制协议(TCP)分组和(C)操作数据的混淆。每个检测层都依赖于使用来自发电厂的数据训练的机器学习(ML)模型。特别地,第一层(基于网络流的检测)执行监督的多字符分类,识别拒绝服务(DOS),蛮力攻击,端口扫描攻击和机器人。第二层(基于分组的检测)检测与Modbus分组相关的可能的异常,而第三层(基于操作数据的检测)监视并在操作数据时识别异常(即,时间序列电测量)。通过强调第三层,开发了具有新型误差最小化功能的白羊座生成的对抗性网络(白羊座GaN),主要考虑了重建差异。此外,提出了一种新颖的改革条件输入,包括随机噪声和任何给定时间实例的信号特征。基于评价分析,提出的GaN网络克服了常规ML方法在准确性和F1分数方面的功效。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
代理获取

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号