Poster

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, vol. 51, pp. 3463–3465

Abstract

Advances in digitalization and networking of power grids have increased the risks of cyberattacks against such critical infrastructures, where the attacks often originate from within the power grid's network. Adequate detection must hence consider both physical access violations and network anomalies to identify the attack's origin. Therefore, we propose INSIDE, combining network intrusion detection with automated facility monitoring to swiftly detect cyberattacks on power grids based on unauthorized access. Besides providing an initial design for INSIDE, we discuss potential use cases illustrating the benefits of such a comprehensive methodology.

Authors 5

1. Martin Serror

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE, Wachtberg, Germany

2. Lennart Bader

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE, Wachtberg, Germany

3. Martin Henze Aachen Fraunhofer FKIE

   RWTH Aachen University · Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   RWTH Aachen University & Fraunhofer FKIE, Aachen, Germany

4. Arne Schwarze

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE, Wachtberg, Germany

5. Kai Nürnberger

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE, Wachtberg, Germany