Wide-area Cyber-security Analytics Solution for Critical Infrastructures

IEEE International Energy Conference (ENERGYCON), vol. 10, pp. 34–37

Abstract

On-line sharing of cyber-security information is necessary to effectively counter cyber-attacks. An online cyber-security analytics system for detecting and mitigating cyber-attacks and sharing information between Critical Infrastructure operators and regional and national authorities and also internationally is presented. The system contains one part which acts as a Security Operations Centre at Critical Infrastructure-level, with the capability to automatically mitigate attacks, and a part on meta- Critical Infrastructure level which, on a pan-European scale, gathers and analyses cyber-security information provided by the Critical Infrastructure operators and provides the results of the wide-area cyber-security analytics to authorities and back to the Critical Infrastructure operators. A use case of the system detecting and mitigating an attack is presented.

Authors 5

1. P. McKeever Aachen Institute for Automation of Complex Power Systems

   RWTH Aachen University

   Affiliation as printed

   Institute for Automation of Complex Power Systems RWTH Aachen University, Aachen, Germany

2. Manuel Allhof
   Affiliation as printed

   P3 Energy & Storage GmbH, Aachen, Germany

3. Antonello Corsi
   Affiliation as printed

   Ingegneria Informatica Spa, Rome, Italy

4. Igor Sowa Aachen Institute for Automation of Complex Power Systems

   RWTH Aachen University

   Affiliation as printed

   Institute for Automation of Complex Power Systems RWTH Aachen University, Aachen, Germany

5. Antonello Monti Aachen Institute for Automation of Complex Power Systems

   RWTH Aachen University

   Affiliation as printed

   Institute for Automation of Complex Power Systems RWTH Aachen University, Aachen, Germany