Timely detection and mitigation of IoT-based cyberattacks in the smart grid

摘要

The ongoing changes, updates, and upgrades of the Smart Grid infrastructure open up new cyber-security challenges whose successful and satisfactory handling is a vital necessity for a viable future of these initiatives. The characteristic of the Smart Grid that leads to physical damage and cascading power failures amplifies the severity of security breaches. A set of recent successful Distributed Denial-of-Service (DDoS) attacks on the Internet, facilitated by the proliferation of the Internet-of-Things (IoT) powered botnets, shows that the Smart Grid may become the target and likely victim of such an attack, potentially leaving catastrophic outage of power service to millions of people. In this paper, under a hierarchical data collection infrastructure we propose a general and scalable mitigation approach, called Minimally Invasive Attack Mitigation via Detection Isolation and Localization (MIAMI-DIL), based on an online and nonparametric anomaly detection algorithm which is scalable and capable of timely detection. We provide a proof-of-concept by means of simulations to show the efficacy and scalability of the proposed approach. (C) 2019 Published by Elsevier Ltd on behalf of The Franklin Institute.