文章基本信息

标题：DDoS Cyber-Incident Detection in Smart Grids
本地全文：下载
作者：Jorge C. Merlino ; Mohammed Asiri ; Neetesh Saxena 等
期刊名称：Sustainability
印刷版ISSN：2071-1050
出版年度：2022
卷号：14
期号：5
页码：2730
DOI：10.3390/su14052730
语种：English
出版社：MDPI, Open Access Journal
摘要：The smart grid (SG) offers potential benefits for utilities, electric generators, and customers alike. However, the prevalence of cyber-attacks targeting the SG emphasizes its dark side. In particular, distributed denial-of-service (DDoS) attacks can affect the communication of different devices, interrupting the SG’s operation. This could have profound implications for the power system, including area blackouts. The problem is that few operational technology tools provide reflective DDoS protection. Furthermore, such tools often fail to classify the types of attacks that have occurred. Defensive capabilities are necessary to identify the footprints of attacks in a timely manner, as they occur, and to make these systems sustainable for delivery of the services as expected. To meet this need for defensive capabilities, we developed a situational awareness tool to detect system compromise by monitoring the indicators of compromise (IOCs) of amplification DDoS attacks. We achieved this aim by finding IOCs and exploring attack footprints to understand the nature of such attacks and their cyber behavior. Finally, an evaluation of our approach against a real dataset of DDoS attack instances indicated that our tool can distinguish and detect different types of amplification DDoS attacks.