An efficient Intrusion Detection System against cyber-physical attacks in the smart grid

Mohamed Attia (1) , Sidi Mohammed Senouci (1) , Hichem Sedjelmaci (2) , El-Hassane Aglzim (1) , Daniela Chrenko (3)

1 DRIVE - Département de Recherche en Ingénierie des Véhicules pour l'Environnement [Nevers]
2 IRT Paris-Saclay, France
3 FEMTO-ST - Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies (UMR 6174)

Without robust security mechanisms, the smart grid remains vulnerable to many attacks that can cause serious damages. Since state estimation is a critical entity to monitor and control electricity production and distribution, intruders are more attracted by this entity in order to disrupt the smart grid reliability. In this context, we propose an Intrusion Detection System (IDS) architecture to detect lethal attacks with a focus on two smart grid security issues: (i) Firstly, against integrity issue with price manipulation attack, we propose a Cumulative Sum (CUSUM) algorithm that detects this attack even with granular price changes; (ii) Secondly, the availability issue with Denial of Service (DoS) attack against which we develop an efficient method to monitor and detect any misbehaving node. Performance evaluations show the robustness of the proposed IDS system compared to existing mechanisms. The achieved detection rate is above 95% and the false positive rate is below 5%.

Mots clés: Intrusion Detection System (IDS)attack; State estimation; Smart grid; DoS attack; Price manipulation

Domaines: Sciences de l'ingénieur [physics]; Informatique [cs]; Mécanique des fluides [physics.class-ph]; Thermique [physics.class-ph]; Automatique / Robotique; Energie électrique

Mohamed Attia, Sidi Mohammed Senouci, Hichem Sedjelmaci, El-Hassane Aglzim, Daniela Chrenko. An efficient Intrusion Detection System against cyber-physical attacks in the smart grid. Computers and Electrical Engineering, 2018, 39, pp.740-750. ⟨10.1016/j.compeleceng.2018.05.006⟩. ⟨hal-02443442⟩