Abstract:<p>Industrial Cyber-physical systems (ICPSs), integrating communication, computation and control of industrial processes are referred to as a core technology to approach the <em>Industry 4.0</em>. Ensuring the ICPS security is of paramount importance in smart manufacturing. Considering the characteristics of large-scale, geographically-dispersed and multi-dimensional heterogeneous, federated and life-critical natures of ICPSs, this paper investigates a hierarchically distributed intrusion detection scheme that seeks to achieve the all-round safety protection of ICPSs according to the system structure and attacking types of each ICPS layer. For physical system-relevant perceptual executive layer, potential and covert attacks are detected by the clustered sensory system state residual anomaly monitoring based on a process noise and measurement noise-adaptive Kalman filter (PNMN-AKF). PNMN-AKF can perform a joint recursive estimation of dynamic system states, time-varying process and measurement noise covariance matrices by the variational Bayes approximation framework. In cyberspace, potential cyber-attacks are detected by the anomaly monitoring of the statistical distribution of the network transmission characteristics of data transmission layer by introducing a forgetting factor-induced recursive Gaussian mixture model (FF-RGMM). In the application control layer, a regularized sparse deep belief network model is introduced to characterize the misuse behavior for detecting potential attacks. Extensive validation and comparative experiments have been conducted on a numerical simulation system and a comprehensive ICPS simulation platform by using OPNET and a commonly-used benchmark simplified Tennessee Eastman process (STEP) based on Matlab/Simulink. Experimental results demonstrate that the proposed hierarchically distributed intrusion detection method can efficiently recognize potential and covert cyber-attacks in each ICPSs link with low false alarm rate and missing detection rate, which lays a foundation for the overall security monitoring of ICPSs.</p>

A Data-Driven Based Security Situational Awareness Framework for Power Systems

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Power IoT System Security Monitoring Based on Power Consumption Side Channel Information.

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

A Confidence-Aware Machine Learning Framework for Dynamic Security Assessment

Attack Detection for Distributed Photovoltaic Generation Systems Leveraging Cyber and Power Side Channel Data

Distributed Attack Detection of Multi-area Power Systems Against False Data Injection Attacks

Cybersecurity Analysis of Data-Driven Power System Stability Assessment

Toward security monitoring of industrial Cyber-Physical systems via hierarchically distributed intrusion detection

Analysis and Application of intelligent Power Control System Cyber Security Situation Awareness Based on Wavelet Neural Network

A Review on Cybersecurity Analysis, Attack Detection, and Attack Defense Methods in Cyber-physical Power Systems

Security Situation Awareness System Based on Artificial Intelligence

Security Assessment for Cyber Physical Distribution Power System Under Intrusion Attacks

SDN-Based Dynamic Cybersecurity Framework of IEC-61850 Communications in Smart Grid

Development and application of on-line dynamic security early warning and preventive control system in China

Implementation of a power system dynamic security assessment and early warning system

A Multi-Source Big Data Security System of Power Monitoring Network Based on Adaptive Combined Public Key Algorithm

Implementation of Power System Real Time Dynamic Security Assessment and Early Warning System

A Firewall Optimization for Threat-Resilient Micro-Segmentation in Power System Networks

Artificial Immune System Based Intrusion Detection In A Distributed Hierarchical Network Architecture Of Smart Grid

Study on Network Security Architecture for Power Systems