Increasing Visibility of IEC 104 Communication in the Smart Grid

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26230%2F19%3APU134160" target="_blank" >RIV/00216305:26230/19:PU134160 - isvavai.cz</a>
Result on the web
<a href="https://www.scienceopen.com/document?vid=0ba50e72-98fe-4bbf-b683-6107a28c4df4" target="_blank" >https://www.scienceopen.com/document?vid=0ba50e72-98fe-4bbf-b683-6107a28c4df4</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.14236/ewic/icscsr19.3" target="_blank" >10.14236/ewic/icscsr19.3</a>

Result language
angličtina
Original language name
Increasing Visibility of IEC 104 Communication in the Smart Grid
Original language description
Energy systems like smart grids are part of critical infrastructure and their interruption or blackout may have fatal consequences on energy production, distribution, and eventually the life of individual people. In order to secure communication in Industrial Control Systems (ICS) and detect cyber attacks on smart grids, we need to increase visibility of ICS communication so that an operator can see what commands are sent between ICS devices. Security monitoring of ICS transmission requires (i) retrieving monitoring data from ICS packets, (ii) processing and analyzing extracted data, (iii) visualizing the passing communication to the operator. The proposed work presents a concept of ICS flow monitoring system that extracts meta data from ICS packet headers and creates ICS flow records similarly to Netflow/IPFIX system. ICS flows represent communication in the smart grid network that is further visualized using dashboard and communication charts. Unlike traditional monitoring approach that works with network and transport layer data only, we extend flow monitoring to application layer with focus on ICS protocols. The proposed approach is demonstrated on monitoring IEC 60870-5-104 communication.
Czech name
—
Czech description
—

Project
<a href="/en/project/TF03000029" target="_blank" >TF03000029: Internet of Things Monitoring and Forensics (IRONSTONE)</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2019
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
6th International Symposium for ICS & SCADA Cyber Security Research 2019
ISBN
978-1-78017-523-2
ISSN
—
e-ISSN
—
Number of pages
10
Pages from-to
21-30
Publisher name
BCS Learning and Development Ltd.
Place of publication
Swindon
Event location
Athens
Event date
Sep 10, 2019
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
—

Similar results(10)