{"title":"Latency-aware segmentation and trust system placement in smart grid SCADA networks","authors":"M. Hasan, H. Mouftah","doi":"10.1109/CAMAD.2016.7790327","DOIUrl":null,"url":null,"abstract":"This paper proposes a latency-aware trust system placement scheme for smart grid SCADA networks. Trust systems are specialized security devices that are deployed to provide cyber protection to supervisory control and data acquisition (SCADA) systems. Their functionalities include firewalling and intrusion detection. They are capable of monitoring both types of traffic, ingress and egress. Only a selected number of nodes are equipped with trust systems due to budgetary constraints. Those nodes are known as the trust nodes. As trust nodes are responsible for distributing time critical messages, it is important to consider the impact of latency in the selection of trust nodes. Network segmentation is a commonly used way of trust node computations. This paper proposes a latency-aware segmentation approach that exploits the graph theoretic properties of minimum spanning trees (MSTs). Numerical results are obtained through case studies for the IEEE BUS 118 test system topology. The results reveal that the proposed scheme is capable of reducing the impact of latency.","PeriodicalId":207184,"journal":{"name":"2016 IEEE 21st International Workshop on Computer Aided Modelling and Design of Communication Links and Networks (CAMAD)","volume":"2 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2016-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"12","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2016 IEEE 21st International Workshop on Computer Aided Modelling and Design of Communication Links and Networks (CAMAD)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CAMAD.2016.7790327","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 12
Abstract
This paper proposes a latency-aware trust system placement scheme for smart grid SCADA networks. Trust systems are specialized security devices that are deployed to provide cyber protection to supervisory control and data acquisition (SCADA) systems. Their functionalities include firewalling and intrusion detection. They are capable of monitoring both types of traffic, ingress and egress. Only a selected number of nodes are equipped with trust systems due to budgetary constraints. Those nodes are known as the trust nodes. As trust nodes are responsible for distributing time critical messages, it is important to consider the impact of latency in the selection of trust nodes. Network segmentation is a commonly used way of trust node computations. This paper proposes a latency-aware segmentation approach that exploits the graph theoretic properties of minimum spanning trees (MSTs). Numerical results are obtained through case studies for the IEEE BUS 118 test system topology. The results reveal that the proposed scheme is capable of reducing the impact of latency.
提出了一种基于延迟感知的智能电网SCADA网络信任系统配置方案。信任系统是为监控和数据采集(SCADA)系统提供网络保护而部署的专用安全设备。它们的功能包括防火墙和入侵检测。它们能够监控两种类型的流量,入口和出口。由于预算限制,只有选定数量的节点配备了信任系统。这些节点被称为信任节点。由于信任节点负责分发时间关键消息,因此在选择信任节点时考虑延迟的影响非常重要。网络分段是一种常用的信任节点计算方法。本文提出了一种利用最小生成树(MSTs)图论特性的延迟感知分割方法。通过对IEEE BUS 118测试系统拓扑的实例分析,得到了数值结果。结果表明,所提出的方案能够降低延迟的影响。