METIS: a Two-Tier Intrusion Detection System for Advanced Metering Infrastructures

Gulisano, Vincenzo Massimiliano,1984Chalmers tekniska högskola,Chalmers University of Technology (författare)

In the shift from traditional to cyber-physical electric grids, motivated by the needs for improved energy efficiency, Advanced Metering Infrastructures have a key role. However, together with the enabled possibilities, they imply an increased threat surface on the systems. Challenging aspects such as scalable traffic analysis, timely detection of malicious activity and intuitive ways of specifying detection mechanisms for possible adversary goals are among the core problems in this domain. Aiming at addressing the above, we present METIS, a two-tier streaming-based intrusion detection framework. METIS relies on probabilistic models for detection and is designed to detect challenging attacks in which adversaries aim at being unnoticed. Thanks to its two-tier architecture, it eases the modeling of possible adversary goals and allows for a fully distributed and parallel traffic analysis through the data streaming processing paradigm. At the same time, it allows for complementary intrusion detection systems to be integrated in the framework. We demonstrate METIS’ use and functionality through an energy exfiltration use-case, in which an adversary aims at stealing energy information from AMI users. Based on a prototype implementation using the Storm Stream Processing Engine and a very large dataset from a real-world AMI, we show that METIS is not only able to detect such attacks, but that it can also handle large volumes of data even when run on commodity hardware.

Almgren, Magnus,1972Chalmers tekniska högskola,Chalmers University of Technology(Swepub:cth)almgren (författare)
Papatriantafilou, Marina,1966Chalmers tekniska högskola,Chalmers University of Technology(Swepub:cth)ptrianta (författare)
Chalmers tekniska högskola (creator_code:org_t)

Ingår i:Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications EngineeringCham : Springer International Publishing153, s. 51-681867-82111867-822X

Av författaren/redakt...: Gulisano, Vincen ...; Almgren, Magnus, ...; Papatriantafilou ...

Om ämnet

TEKNIK OCH TEKNOLOGIER: TEKNIK OCH TEKNO ...; och Elektroteknik oc ...; och Kommunikationssy ...

TEKNIK OCH TEKNOLOGIER: TEKNIK OCH TEKNO ...; och Elektroteknik oc ...; och Datorsystem

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.