Sökning: L773:1867 8211 OR L773:1867 822X >
METIS: a Two-Tier I...
-
Gulisano, Vincenzo Massimiliano,1984Chalmers tekniska högskola,Chalmers University of Technology
(författare)
METIS: a Two-Tier Intrusion Detection System for Advanced Metering Infrastructures
- Artikel/kapitelEngelska2015
Förlag, utgivningsår, omfång ...
-
2015-11-19
-
Cham :Springer International Publishing,2015
Nummerbeteckningar
-
LIBRIS-ID:oai:research.chalmers.se:81eb7b79-dfda-4655-8401-e3f865170aa3
-
https://research.chalmers.se/publication/207632URI
-
https://doi.org/10.1007/978-3-319-23802-9_7DOI
Kompletterande språkuppgifter
-
Språk:engelska
-
Sammanfattning på:engelska
Ingår i deldatabas
Klassifikation
-
Ämneskategori:kon swepub-publicationtype
-
Ämneskategori:ref swepub-contenttype
Anmärkningar
-
In the shift from traditional to cyber-physical electric grids, motivated by the needs for improved energy efficiency, Advanced Metering Infrastructures have a key role. However, together with the enabled possibilities, they imply an increased threat surface on the systems. Challenging aspects such as scalable traffic analysis, timely detection of malicious activity and intuitive ways of specifying detection mechanisms for possible adversary goals are among the core problems in this domain. Aiming at addressing the above, we present METIS, a two-tier streaming-based intrusion detection framework. METIS relies on probabilistic models for detection and is designed to detect challenging attacks in which adversaries aim at being unnoticed. Thanks to its two-tier architecture, it eases the modeling of possible adversary goals and allows for a fully distributed and parallel traffic analysis through the data streaming processing paradigm. At the same time, it allows for complementary intrusion detection systems to be integrated in the framework. We demonstrate METIS’ use and functionality through an energy exfiltration use-case, in which an adversary aims at stealing energy information from AMI users. Based on a prototype implementation using the Storm Stream Processing Engine and a very large dataset from a real-world AMI, we show that METIS is not only able to detect such attacks, but that it can also handle large volumes of data even when run on commodity hardware.
Ämnesord och genrebeteckningar
Biuppslag (personer, institutioner, konferenser, titlar ...)
-
Almgren, Magnus,1972Chalmers tekniska högskola,Chalmers University of Technology(Swepub:cth)almgren
(författare)
-
Papatriantafilou, Marina,1966Chalmers tekniska högskola,Chalmers University of Technology(Swepub:cth)ptrianta
(författare)
-
Chalmers tekniska högskola
(creator_code:org_t)
Sammanhörande titlar
-
Ingår i:Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications EngineeringCham : Springer International Publishing153, s. 51-681867-82111867-822X
Internetlänk
Hitta via bibliotek
Till lärosätets databas