On Process Awareness in Detecting Multi-stage Cyberattacks in Smart Grids
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866909418097999872 |
|---|---|
| author | Sen, Omer Aust, Yanico Glomb, Simon Ulbig, Andreas |
| author_facet | Sen, Omer Aust, Yanico Glomb, Simon Ulbig, Andreas |
| contents | This study delves into the role of process awareness in enhancing intrusion detection within Smart Grids, considering the increasing fusion of ICT in power systems and the associated emerging threats. The research harnesses a co-simulation environment, encapsulating IT, OT, and ET layers, to model multi-stage cyberattacks and evaluate machine learning-based IDS strategies. The key observation is that process-aware IDS demonstrate superior detection capabilities, especially in scenarios closely tied to operational processes, as opposed to IT-only IDS. This improvement is notable in distinguishing complex cyber threats from regular IT activities. The findings underscore the significance of further developing sophisticated IDS benchmarks and digital twin datasets in Smart Grid environments, paving the way for more resilient cybersecurity infrastructures. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2412_04902 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | On Process Awareness in Detecting Multi-stage Cyberattacks in Smart Grids Sen, Omer Aust, Yanico Glomb, Simon Ulbig, Andreas Cryptography and Security This study delves into the role of process awareness in enhancing intrusion detection within Smart Grids, considering the increasing fusion of ICT in power systems and the associated emerging threats. The research harnesses a co-simulation environment, encapsulating IT, OT, and ET layers, to model multi-stage cyberattacks and evaluate machine learning-based IDS strategies. The key observation is that process-aware IDS demonstrate superior detection capabilities, especially in scenarios closely tied to operational processes, as opposed to IT-only IDS. This improvement is notable in distinguishing complex cyber threats from regular IT activities. The findings underscore the significance of further developing sophisticated IDS benchmarks and digital twin datasets in Smart Grid environments, paving the way for more resilient cybersecurity infrastructures. |
| title | On Process Awareness in Detecting Multi-stage Cyberattacks in Smart Grids |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2412.04902 |