A triple layer intrusion detection system for SCADA security of electric utility

Abstract

World is talking about connecting everything to the internet. Electric grids are no exception, and are rather one of the first application areas of the proposal. This connection with the internet has raised concerns about the inherent supervisory control and data acquisition (SCADA) systems, whose structure too is adapting with the upcoming needs. The security concerns also include other vulnerabilities, which are not caused due to the internet connectivity, but rather due to some disgruntled employee or social engineering. The paper incorporates the intrusion detection systems (IDSs) created worldwide and proposes an integrated triple layer module. This includes a novel “What-if” module based layer to predict the malicious intent of a command signal. This module is also expected to predict some impending failure of the system. The other two layers include one communication protection layer and one data authentication layer for field devices. We eventually clarify why all the IDS being proposed worldwide shall benefit if these work in tandem amongst themselves and moreover in tandem with the proposed “What-if” module.