A Comparative Analysis of Emulated and Real IEC-104 Spontaneous Traffic in Power System Networks

Lin, Chih-Yuan,1987-Linköpings universitet,Programvara och system,Tekniska fakulteten (författare)

Supervisory and Data Acquisition (SCADA) systems control and monitor modern power networks. As attacks targeting SCADA systems are increasing, significant research is conducted to defend SCADA networks including variations of anomaly detection. Due to the sensitivity of real data, many defence mechanisms have been tested only in small testbeds or emulated traffic that were designed with assumptions on how SCADA systems behave. This work provides a timing characterization of IEC-104 spontaneous traffic and compares the results from emulated traffic and real traffic to verify if the network characteristics appearing in testbeds and emulated traffic coincide with real traffic. Among three verified characteristics, two of them appear in the real dataset but in a less regular way, and one does not appear in the collected real data. The insights from these observations are discussed in terms of presumed differences between emulated and real traffic and how those differences are generated.

Nadjm-Tehrani, Simin,1958-Linköpings universitet,Programvara och system,Tekniska fakulteten(Swepub:liu)simna73 (författare)
Linköpings universitetProgramvara och system (creator_code:org_t)

Ingår i:Cyber-Physical Security for Critical Infrastructures ProtectionCham : Springer, s. 207-22397830306978089783030697815

Om ämnet

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.