Implementation of deep packet inspection in smart grids and industrial Internet of Things: Challenges and opportunities. (1st June 2019)

• Record Type: Journal Article
• Authors: De La Torre Parra, Gonzalo; Rad, Paul; Choo, Kim-Kwang Raymond
• Is Part Of: Journal of network and computer applications. Volume 135(2019)
• Page Start: 32
• Page End: 46
• Publication Date: 2019-06-01
• Subjects: Smart grid -- Industrial control system -- Industrial internet of things -- Deep Packet Inspection -- Advanced metering infrastructure -- Cybersecurity -- Forensic-by-design -- Forensic-driven security monitoring; Microcomputers -- Periodicals; Computer networks -- Periodicals; Application software -- Periodicals; Micro-ordinateurs -- Périodiques; Réseaux d'ordinateurs -- Périodiques; Logiciels d'application -- Périodiques; Application software; Computer networks; Microcomputers; Periodicals; 004.05; 004
• DOI: 10.1016/j.jnca.2019.02.022
• Languages: English
• ISSNs: 1084-8045

Abstract

Abstract: Upgrading a power grid to a smart grid is a challenging task. For example, since power grids were originally developed to support unidirectional communications, the migration process requires architectural and cybersecurity upgrades due to the integration of devices using bidirectional communication. The integration of these devices opens numerous avenues for cyber attacks, although they also enable numerous capabilities in smart grids. To protect the smart grid from cyber threats, it is important for industry and academia to explore and implement practical cybersecurity models together, for example collaboratively designing and developing suitable smart grid testbeds to facilitate research. In this paper, we survey existing literature relating to the infrastructure and communications for the energy sector and smart grids. Specifically, we study existing recommendations and models from government agencies (e.g. NIST and DOE) and academia, and evaluate deep packet inspection (DPI) approaches as a security tool for smart grids. We also propose a conceptual SDN-based security monitoring framework based on SDN, Network Behavior Analysis (NBA), Deep Learning Models, and DPI attack corroboration, as well as a conceptual forensic-driven security monitoring framework where digital forensics and investigation capabilities are integrated to inform security monitoring. Graphical abstract: Image 1 Highlights: Implementation of deep packet inspection in smart grids. Software defined network (SDN) and OpenFMB based control in smart grids. Power delivery flow in smart grids. Software defined network (SDN)-enabled smart grids.