Intrusion Detection of NSM Based DoS Attacks Using Data Mining in Smart Grid

Kyung Choi, Xinyi Chen, Shi Li, Mihui Kim, Kijoon Chae and JungChan Na
Additional contact information
Kyung Choi: Department of Computer Science and Engineering, Ewha Womans University, Seoul 120-750, Korea
Xinyi Chen: Department of Computer Science and Engineering, Ewha Womans University, Seoul 120-750, Korea
Shi Li: Department of Computer Science and Engineering, Ewha Womans University, Seoul 120-750, Korea
Mihui Kim: Department of Computer Engineering, Hankyong National University, Anseong 456-749, Korea
Kijoon Chae: Department of Computer Science and Engineering, Ewha Womans University, Seoul 120-750, Korea
JungChan Na: Managed Security Research Team, Electronics and Telecommunications Research Institute, Daejeon 305-700, Korea

Energies, 2012, vol. 5, issue 10, 1-19

Abstract: In this paper, we analyze the Network and System Management (NSM) requirements and NSM data objects for the intrusion detection of power systems; NSM is an IEC 62351-7 standard. We analyze a SYN flood attack and a buffer overflow attack to cause the Denial of Service (DoS) attack described in NSM. After mounting the attack in our attack testbed, we collect a data set, which is based on attributes for the attack. We then run several data mining methods with the data set using the Waikato Environment for Knowledge Analysis (WEKA). In the results, we select the decision tree algorithms with high detection rates, and choose key attributes in high level components of the trees. When we run several data mining methods again with the data set of chosen key attributes, the detection rates of most data mining methods are higher than before. We prove that our selected attack attributes, and the proposed detection process, are efficient and suitable for intrusion detection in the smart grid environment.

Keywords: Denial of Service (DoS) attack; intrusion detection; Network and System Management (NSM); smart grid; data mining (search for similar items in EconPapers)
JEL-codes: Q Q0 Q4 Q40 Q41 Q42 Q43 Q47 Q48 Q49 (search for similar items in EconPapers)
Date: 2012
References: View complete reference list from CitEc
Citations: View citations in EconPapers (4)

Downloads: (external link)
https://www.mdpi.com/1996-1073/5/10/4091/pdf (application/pdf)
https://www.mdpi.com/1996-1073/5/10/4091/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jeners:v:5:y:2012:i:10:p:4091-4109:d:20814

Access Statistics for this article

Energies is currently edited by Ms. Agatha Cao

More articles in Energies from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().