최현호, 이중희,

Vol. 34, No. 4, pp. 615-627, 8월. 2024
10.13089/JKIISC.2024.34.4.615, Full Text:
Keywords: DNP3, Intrusion Detection System, State estimation, Energy Management System
Abstract

With the evolution of power systems and advancements in IT technology, there is an increasing demand to shift from serial-based communication to TCP/IP-based communication. However, TCP/IP communication entails various security threats, necessitating extensive consideration from an information security perspective. Security measures such as authentication and encryption cannot be rapidly implemented due to issues like the replacement of Remote Terminal Units (RTUs) and the performance requirements of encryption algorithms. This paper proposes a state estimation-based intrusion detection model to identify and effectively detect threats to power control systems in such a context. The proposed model, in addition to signature detection methods, verifies the validity of acquired data, enabling it to detect attacks that are difficult to identify using traditional methods, such as data tampering.

Statistics
Cite this article