Implementation of deep packet inspection in smart grids and industrial Internet of Things: Challenges and opportunities
| Autor: | Kim-Kwang Raymond Choo, Gonzalo De La Torre Parra, Paul Rad |
|---|---|
| Rok vydání: | 2019 |
| Předmět: |
Government
Computer Networks and Communications Process (engineering) Computer science Digital forensics 020206 networking & telecommunications Deep packet inspection 02 engineering and technology Computer security computer.software_genre Energy sector Computer Science Applications Task (project management) Smart grid Hardware and Architecture 0202 electrical engineering electronic engineering information engineering 020201 artificial intelligence & image processing computer |
| Zdroj: | Journal of Network and Computer Applications. 135:32-46 |
| ISSN: | 1084-8045 |
| DOI: | 10.1016/j.jnca.2019.02.022 |
| Popis: | Upgrading a power grid to a smart grid is a challenging task. For example, since power grids were originally developed to support unidirectional communications, the migration process requires architectural and cybersecurity upgrades due to the integration of devices using bidirectional communication. The integration of these devices opens numerous avenues for cyber attacks, although they also enable numerous capabilities in smart grids. To protect the smart grid from cyber threats, it is important for industry and academia to explore and implement practical cybersecurity models together, for example collaboratively designing and developing suitable smart grid testbeds to facilitate research. In this paper, we survey existing literature relating to the infrastructure and communications for the energy sector and smart grids. Specifically, we study existing recommendations and models from government agencies (e.g. NIST and DOE) and academia, and evaluate deep packet inspection (DPI) approaches as a security tool for smart grids. We also propose a conceptual SDN-based security monitoring framework based on SDN, Network Behavior Analysis (NBA), Deep Learning Models, and DPI attack corroboration, as well as a conceptual forensic-driven security monitoring framework where digital forensics and investigation capabilities are integrated to inform security monitoring. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|
Full Text from ScienceDirect