Power control terminals are an important part of digital substation power industrial control system. Once invaded, they can pose significant security threats to the system. Therefore, researching intrusion detection for power control devices is crucial to safeguard the security of the entire power industrial control system. In digital substations, most power control terminals are composed of IoT devices, and a significant portion of them are non-involved devices. Currently, the threat of botnet invasions to non-involved IoT terminals in digital substations has become more prominent. On the one hand, due to the evolution of botnets in recent years, there are more and more types of botnets, increasing destructive power and increasing threats to cybersecurity. On the other hand, the features of them differ significantly from that of traditional internet bots, rendering conventional detection technologies less effective. In this paper, we propose an innovative botnet detection framework for power control terminals in digital substation power industrial control systems using a recurrent neural network. Considering the spatial and temporal consistency in the binary packages of IoT botnets, we extract features based on abnormal behavior and network flow. Subsequently, we employ recurrent neural network models for the detection process. Our experimental results demonstrate an impressive F1 score of 95.80%, presenting a practical and significant solution for identifying IoT zombies in power industrial control systems.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Intrusion Threat Detection of Power Control Terminals in Digital Substation Power Industrial Control Systems Based on Recurrent Neural Network


    Contributors:
    Minhui, Ge (author) / Liang, Zhang (author) / Gang, Qu (author) / Futai, Zou (author)


    Publication date :

    2023-10-11


    Size :

    2782269 byte




    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English





    Power efficient architecture for network intrusion detection system

    Bontupalli, VenkataRamesh / Hasan, Raqibul / Taha, Tarek M. | IEEE | 2014


    Modeling and Simulation of Intelligent Substation Network Under Intrusion Attack

    Huang, Xiaojuan / Fu, Rong / Tang, Yi et al. | Springer Verlag | 2017


    Feed-forward neural network for Network Intrusion Detection

    Rosay, Arnaud / Carlier, Florent / Leroux, Pascal | IEEE | 2020