Double-Edged Defense: Thwarting Cyber Attacks and Adversarial Machine Learning in IEC 60870-5-104 Smart Grids

Smart grids (SGs), a cornerstone of modern power systems, facilitate efficient management and distribution of electricity. Despite their advantages, increased connectivity and reliance on communication networks expand their susceptibility to cyber threats. Machine learning (ML) can radically transfo...

Full description

Saved in:

Bibliographic Details
Published in:	IEEE open journal of the Industrial Electronics Society Vol. 4; pp. 1 - 14
Main Authors:	Teryak, Hadir, Albaseer, Abdullatif, Abdallah, Mohamed, Al-kuwari, Saif, Qaraqe, Marwa
Format:	Journal Article
Language:	English
Published:	New York IEEE 01-01-2023 The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subjects:	Adversarial Attacks Anomalies Artificial neural networks Communication Communication networks Cyberattack Cybersecurity Data models Deep Learning Electric power distribution Electric power systems Electricity distribution IEC 60870-5-104 Protocol IEC Standards Intrusion detection systems Intrusion Detection Systems (IDS) Machine Learning machine learning (ML) Protocols Resilience Security Smart grid Smart Grids smart grids (SGs) Support vector machines Traffic information
Online Access:	Get full text
Tags:	Add Tag No Tags, Be the first to tag this record!

Description
Summary:	Smart grids (SGs), a cornerstone of modern power systems, facilitate efficient management and distribution of electricity. Despite their advantages, increased connectivity and reliance on communication networks expand their susceptibility to cyber threats. Machine learning (ML) can radically transform cybersecurity in SGs and secure protocols as in IEC 60870 standard, an international standard for electric power system communication. Notwithstanding, cyber adversaries are now exploiting ML-based intrusion detection systems (IDS) using adversarial ML attacks, potentially undermining SG security. This paper addresses cyber attacks on the communication network of SGs, specifically targeting the IEC 60870-5-104 protocol. We introduce a novel ML-based IDS framework for the IEC 60870-5-104 protocol. Specifically, we employ an artificial neural network (ANN) to analyze a new and realistically representative dataset of IEC 60870-5-104 traffic data, unlike previous research that relies on simulated or unrelated data. This approach assists in identifying anomalies indicative of cyber attacks more accurately. Furthermore, we evaluate the resilience of our ANN model against adversarial attacks, including the Fast Gradient Sign Method (FGSM), Projected Gradient Descent (PGD), and Carlini and Wagner (C&W) attacks. Our results demonstrate that the proposed framework can accurately detect cyberattacks and remains robust to adversarial attacks. This offers efficient and resilient IDS capabilities to detect and mitigate cyber-attacks in real-world ML-based adversarial environments.
ISSN:	2644-1284 2644-1284
DOI:	10.1109/OJIES.2023.3336234