In Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security (CCS) - Poster Session, ACM, 2022
@inproceedings{sbh+22,
author = {Serror, Martin and Bader, Lennart and Henze, Martin and Schwarze, Arne and Nürnberger, Kai},
title = {{Poster: INSIDE -- Enhancing Network Intrusion Detection in Power Grids with Automated Facility Monitoring}},
booktitle = {Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security (CCS) - Poster Session},
month = {11},
year = {2022},
doi = {10.1145/3548606.3563500},
}
Abstract
Advances in digitalization and networking of power grids have increased the risks of cyberattacks against such critical infrastructures, where the attacks often originate from within the power grid's network.
Adequate detection must hence consider both physical access violations and network anomalies to identify the attack's origin.
Therefore, we propose INSIDE, combining network intrusion detection with automated facility monitoring to swiftly detect cyberattacks on power grids based on unauthorized access.
Besides providing an initial design for INSIDE, we discuss potential use cases illustrating the benefits of such a comprehensive methodology.