Multi-Layer Agent-Based Simulation of Network Behaviour in Advanced Metering Infrastructures

In this paper we describe a novel approach to model smart meter networks aimed at analyzing security related aspects of such networks. The model is realized as a multi-agent based simulation. This allows for detailed analysis of network behaviour on different layers. The layers realized in the simulation are a protocol layer for syntactic analysis of the protocol, a data layer for semantic analysis of the commands transmitted, and an information layer where metering data is interpreted. The ultimate goal of the project is the design and proof-of-concept implementation of an innovative Intrusion Detection System specifically apt for smart meter networks. The simulation described in this paper together with data from real world field tests will be used to deduce formal rules describing regular behaviour of the network which then will be the input for the IDS.

Content

Author and article information

Contributors

Christoph Lang-Muhr

Matthias Schrattenholzer

Paul Tavolato

Conference

Publication date: September 2015

Publication date (Print): September 2015

Pages: 99-102

Affiliations

[0001]University of Applied Sciences

St. Pölten

Article

DOI: 10.14236/ewic/ICS2015.12

SO-VID: 2ffb861d-b61b-4c14-a725-129b5ae06731

License:

This work is licensed under a Creative Commons Attribution 4.0 Unported License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/

Conference name: 3rd International Symposium for ICS & SCADA Cyber Security Research 2015 (ICS-CSR 2015)

Conference acronym: ICS-CSR

Conference number: 3

Conference location: Germany

Conference date: 17 - 18 September 2015

Conference sponsor: Electronic Workshops in Computing (eWiC)

Conference theme: Industrial Control System & SCADA Cyber Security Research (ICS-CSR)

History

Product

1477-9358 BCS Learning & Development

Self URI (article page): https://www.scienceopen.com/hosted-document?doi=10.14236/ewic/ICS2015.12

Self URI (journal page): https://ewic.bcs.org/

References

EUR-Lex http://eur-lex.europa.eu 2006 5 Apr [Online]. Available: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=URISERV:l27057&fr om=EN 28 May 2015
Bundesgesetzblatt, Intelligente MessgeräteEinführungsverordnung http://www.e-control.at 2012 24 Apr [Online]. Available: http://www.econtrol.at/de/marktteilnehmer/strom/smart-metering/rechtliche-grundlagen 28 May 2015
N Khush 2011 Gap analysis of intrusion detection in smart grids Proceedings of the 2nd International Cyber Resilience Conference
S-S Wu 2011 Cyber Security and information protection in a smart grid environment 18th IFAC World Congress Milano
R MitchellI Chen-R. 2013 Behavior-rule based intrusion detection systems for safety critical smart grid applications IEEE Trans. Smart Grid 4 3 1254 1263
Y ZhangL WangS WeiqingR. C Green IIA Mansoor 2011 Distributed intrusion detection system in a multi-layer network architecture of smart grids IEEE Trans. Smart Grid 2 4 796 808
Z. A BaigS Ahmad 2013.Device implant attack detection for the smart grid King Fahd University of Petroleum & Minerals Dhahran, Saudi Arabia
P Jokar 2012. Model-based intrusion detection for home area networks in smart grids Department of Electrical and Computer Engineering, University of British Columbia
B GengeD RusuP Haller 2014 A connection pattern-based approach to detect network traffic anomalies in critical infrastructures ACM European Workshop on System Security (EuroSec2014) Amsterdam
S Luke 2014 Multiagent simulation and the MASON library Department of Computer Science, George Mason University Fairfax, VA
Y NguyenA Hawkins 2012. SmartGrid/AEIC AMI interoperability standard guidelines for ANSI C12.19 / IEEE 1377 / MC12.19 end device communications and supporting enterprise devices, networks and related accessories, association of edison illuminating companies
KommEnergie http://www.kommenergie.de [Online]. Available: /www.kommenergie. de/netz/standardlastprofil/standardlastprofileslp/ 28 May 2015
D GrochockiJ. H HuhR BerthierR BobbaW. H SandersA. A C’ardenasG. J Jetcheva 2012 AMI threats, intrusion detection requirements and deployment recommendations IEEE SmartGridComm Symposium Institute European Telecommunications Standards ETSI GS OSG 001 V1.1.1, 2012

Comments

Comment on this article

[1] EUR-Lex http://eur-lex.europa.eu 2006 5 Apr [Online]. Available: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=URISERV:l27057&fr om=EN 28 May 2015

[2] Bundesgesetzblatt, Intelligente MessgeräteEinführungsverordnung http://www.e-control.at 2012 24 Apr [Online]. Available: http://www.econtrol.at/de/marktteilnehmer/strom/smart-metering/rechtliche-grundlagen 28 May 2015

[3] N Khush 2011 Gap analysis of intrusion detection in smart grids Proceedings of the 2nd International Cyber Resilience Conference

[4] S-S Wu 2011 Cyber Security and information protection in a smart grid environment 18th IFAC World Congress Milano

[5] R MitchellI Chen-R. 2013 Behavior-rule based intrusion detection systems for safety critical smart grid applications IEEE Trans. Smart Grid 4 3 1254 1263

[6] Y ZhangL WangS WeiqingR. C Green IIA Mansoor 2011 Distributed intrusion detection system in a multi-layer network architecture of smart grids IEEE Trans. Smart Grid 2 4 796 808

[7] Z. A BaigS Ahmad 2013.Device implant attack detection for the smart grid King Fahd University of Petroleum & Minerals Dhahran, Saudi Arabia

[8] P Jokar 2012. Model-based intrusion detection for home area networks in smart grids Department of Electrical and Computer Engineering, University of British Columbia

[9] B GengeD RusuP Haller 2014 A connection pattern-based approach to detect network traffic anomalies in critical infrastructures ACM European Workshop on System Security (EuroSec2014) Amsterdam

[10] S Luke 2014 Multiagent simulation and the MASON library Department of Computer Science, George Mason University Fairfax, VA

[11] Y NguyenA Hawkins 2012. SmartGrid/AEIC AMI interoperability standard guidelines for ANSI C12.19 / IEEE 1377 / MC12.19 end device communications and supporting enterprise devices, networks and related accessories, association of edison illuminating companies

[12] KommEnergie http://www.kommenergie.de [Online]. Available: /www.kommenergie. de/netz/standardlastprofil/standardlastprofileslp/ 28 May 2015

[13] D GrochockiJ. H HuhR BerthierR BobbaW. H SandersA. A C’ardenasG. J Jetcheva 2012 AMI threats, intrusion detection requirements and deployment recommendations IEEE SmartGridComm Symposium Institute European Telecommunications Standards ETSI GS OSG 001 V1.1.1, 2012

Celebrating 65 years of The Computer Journal - free-to-read perspectives - bcs.org/tcj65