A behavior-based intrusion detection technique for smart grid infrastructure

Yoo Jin Kwon, Huy Kang Kim, Yong Hun Lim, Jong In Lim

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    51 Citations (Scopus)


    A smart grid is a fully automated electricity network, which monitors and controls all its physical environments of electricity infrastructure being able to supply energy in an efficient and reliable way. As the importance of cyber-physical system (CPS) security is growing, various intrusion detection algorithms to protect SCADA system and generation sector have been suggested, whereas there were less consideration on distribution sector. Thus, this paper first highlights the significance of CPS security, especially the availability as the most important factor in smart grid environment. Then this paper classifies various modern intrusion detection system (IDS) techniques for securing smart grid network. In our approach, we propose a novel behavior-based IDS for IEC 61850 protocol using both statistical analysis of traditional network features and specification-based metrics. Finally, we present the attack scenarios and detection methods applicable for IEC 61850-based digital substation in Korean environment.

    Original languageEnglish
    Title of host publication2015 IEEE Eindhoven PowerTech, PowerTech 2015
    PublisherInstitute of Electrical and Electronics Engineers Inc.
    ISBN (Print)9781479976935
    Publication statusPublished - 2015 Aug 31
    EventIEEE Eindhoven PowerTech, PowerTech 2015 - Eindhoven, Netherlands
    Duration: 2015 Jun 292015 Jul 2


    OtherIEEE Eindhoven PowerTech, PowerTech 2015


    • anomaly detection
    • Cyber-physical system
    • IEC 61850
    • intrusion detection
    • smart grid

    ASJC Scopus subject areas

    • Renewable Energy, Sustainability and the Environment
    • Electrical and Electronic Engineering
    • Energy Engineering and Power Technology


    Dive into the research topics of 'A behavior-based intrusion detection technique for smart grid infrastructure'. Together they form a unique fingerprint.

    Cite this