| Title | Towards anomaly detection in smart grids by combining Complex Events Processing and SNMP objects |
| Publication Type | Conference Paper |
| Year of Publication | 2021 |
| Authors | Itria, Massimiliano Leone, Schiavone, Enrico, Nostro, Nicola |
| Conference Name | 2021 IEEE International Conference on Cyber Security and Resilience (CSR) |
| Keywords | anomaly detection, Collaboration, complex event processing, composability, cyber-security, Detectors, information and communication technology, middleware security, Pattern recognition, policy-based governance, Protocols, pubcrawl, security, Simple Network Management Protocol, Smart grids, smart meters |
| Abstract | This paper describes the architecture and the fundamental methodology of an anomaly detector, which by continuously monitoring Simple Network Management Protocol data and by processing it as complex-events, is able to timely recognize patterns of faults and relevant cyber-attacks. This solution has been applied in the context of smart grids, and in particular as part of a security and resilience component of the Information and Communication Technologies (ICT) Gateway, a middleware-based architecture that correlates and fuses measurement data from different sources (e.g., Inverters, Smart Meters) to provide control coordination and to enable grid observability applications. The detector has been evaluated through experiments, where we selected some representative anomalies that can occur on the ICT side of the energy distribution infrastructure: non-malicious faults (indicated by patterns in the system resources usage), as well as effects of typical cyber-attacks directed to the smart grid infrastructure. The results show that the detection is promisingly fast and efficient. |
| DOI | 10.1109/CSR51186.2021.9527928 |
| Citation Key | itria_towards_2021 |
Towards anomaly detection in smart grids by combining Complex Events Processing and SNMP objects