Rule-Based Intrusion Detection System for SCADA Networks

Increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in Smart Grids potentially means greater susceptibility to malicious attackers. SCADA systems with legacy communication infrastructure have inherent cyber-security vulnerabilities as these systems were originally designed with little consideration of cyber threats. In order to improve cyber-security of SCADA networks, this paper presents a rule-based Intrusion Detection System (IDS) using a Deep Packet Inspection (DPI) method, which includes signature-based and model-based approaches tailored for SCADA systems. The proposed signature-based rules can accurately detect several known suspicious or malicious attacks. In addition, model-based detection is proposed as a complementary method to detect unknown attacks. Finally, proposed intrusion detection approaches for SCADA networks are implemented and verified using a ruled based method.

Intrusion Detection System for IEC 60870-5-104 Based SCADA Networks

Increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in Smart Grids potentially means greater susceptibility to malicious attackers. SCADA systems with legacy communication infrastructure have inherent cyber-security vulnerabilities as these systems were originally designed with little consideration of cyber threats. In order to improve cyber-security of SCADA networks, this paper presents a rule-based Intrusion Detection System (IDS) using a Deep Packet Inspection (DPI) method, which includes signature-based and model-based approaches tailored for SCADA systems. The proposed signature-based rules can accurately detect several known suspicious or malicious attacks. In addition, model-based detection is proposed as a complementary method to detect unknown attacks. Finally, proposed intrusion detection approaches for SCADA networks are implemented and verified via Snort rules.

A Study of Tower Shadow Effect on Fixed-Speed Wind Turbines

This paper studies the impact of tower shadow effect on the power output of a fixed-speed wind farm. A data acquisition unit was placed at a wind farm in Northern Ireland which consists of ten fixed-speed wind turbines. The recording equipment logged the wind farmpsilas electrical data, which was time stamped using the global positioning network. Video footage of the wind farm was recorded and from it the blade angle of each turbine was determined with respect to time. Using the blade angle data and the wind farmpsilas power output, studies where performed to ascertain the extent of tower shadow effect on power fluctuation. This paper presents evidence that suggests that tower shadow effect has a significant impact on power fluctuation and that this effect is increased due to the synchronising of turbine blades around the tower region.

The Impact of Wind Farm Power Oscillations on the Irish Power System

The impact of power fluctuations arising from fixed-speed wind turbines on the magnitude and frequency of inter-area oscillations has been investigated. The authors introduced data acquisition equipment to record the power flow on the interconnector between the Northern Ireland and Republic of Ireland systems. Through monitoring the interconnector oscillation using a fast Fourier transform, it was possible to determine the magnitude and frequency of the inter-area oscillation between the two systems. The impact of tower shadow on the output power from a wind farm was analysed using data recorded on site. A case study investigates the effect on the system of the removal of a large fixed-speed wind farm. Conclusions are drawn on the impact that conventional generation and the output from fixed-speed wind farms have on the stability of the Irish power system.

Wind Farm Induced Oscillations

The impact of power fluctuations arising from fixed-speed wind turbines on the magnitude and frequency of inter-area oscillations was investigated. The authors used data acquisition equipment to record the power flow on the interconnector between the Northern Ireland and Republic of Ireland systems. By monitoring the interconnector oscillation using a fast Fourier transform, it was possible to determine the magnitude and frequency of the inter-area oscillation between the Northern Ireland electricity system and that of the electricity supply board. Analysis was preformed to determine the relationship (if any) between the inter-area oscillation and the observed wind power generation at the corresponding time. Subsequently, regression analysis was introduced to model this relationship between the FFT output and the wind power generation. The effect of conventional generators on the magnitude and frequency of the inter-area oscillation was also considered.

Multi-Attribute SCADA-Specific Intrusion Detection System for Power Networks

The increased interconnectivity and complexity of supervisory control and data acquisition (SCADA) systems in power system networks has exposed the systems to a multitude of potential vulnerabilities. In this paper, we present a novel approach for a next-generation SCADA-specific intrusion detection system (IDS). The proposed system analyzes multiple attributes in order to provide a comprehensive solution that is able to mitigate varied cyber-attack threats. The multiattribute IDS comprises a heterogeneous white list and behavior-based concept in order to make SCADA cybersystems more secure. This paper also proposes a multilayer cyber-security framework based on IDS for protecting SCADA cybersecurity in smart grids without compromising the availability of normal data. In addition, this paper presents a SCADA-specific cybersecurity testbed to investigate simulated attacks, which has been used in this paper to validate the proposed approach.

Characterisation of densification temperature in rotational moulding

The temperature at which densification ends for a range of blends comprising a metallocene catalysed medium density polyethylene (PE) in two different physical forms (powder and micropellets) were investigated using a novel data acquisition system (TP Picture®), developed by Total Petrochemicals [1]. The various blends were subsequently rotomoulded and test specimens prepared for mechanical analysis to establish the relationship between densification rate and bubble size / distribution on the part properties. The micropellets exhibited more rapid bubble removal times than powder.

A review of ADP processing software

Data processing is an essential part of Acoustic Doppler Profiler (ADP) surveys, which have become the standard tool in assessing flow characteristics at tidal power development sites. In most cases, further processing beyond the capabilities of the manufacturer provided software tools is required. These additional tasks are often implemented by every user in mathematical toolboxes like MATLAB, Octave or Python. This requires the transfer of the data from one system to another and thus increases the possibility of errors. The application of dedicated tools for visualisation of flow or geographic data is also often beneficial and a wide range of tools are freely available, though again problems arise from the necessity of transferring the data. Furthermore, almost exclusively PCs are supported directly by the ADP manufacturers, whereas small computing solutions like tablet computers, often running Android or Linux operating systems, seem better suited for online monitoring or data acquisition in field conditions. While many manufacturers offer support for developers, any solution is limited to a single device of a single manufacturer. A common data format for all ADP data would allow development of applications and quicker distribution of new post processing methodologies across the industry.

Stateful Intrusion Detection for IEC 60870-5-104 SCADA Security

Cyber threats in Supervisory Control and Data Acquisition (SCADA) systems have the potential to render physical damage and jeopardize power system operation, safety and stability. SCADA systems were originally designed with little consideration of escalating cyber threats and hence the problem of how to develop robust intrusion detection technologies to tailor the requirements of SCADA is an emerging topic and a big challenge. This paper proposes a stateful Intrusion Detection System (IDS) using a Deep Packet Inspection (DPI) method to improve the cyber-security of SCADA systems using the IEC 60870-5-104 protocol which is tailored for basic telecontrol communications. The proposed stateful protocol analysis approach is presented that is designed specifically for the IEC 60870-5-104 protocol. Finally, the novel intrusion detection approach are implemented and validated.

Incorporating PGMs into a BDI Architecture

In this paper, we present a hybrid BDI-PGM framework, in which PGMs (Probabilistic Graphical Models) are incorporated into a BDI (belief-desire-intention) architecture. This work is motivated by the need to address the scalability and noisy sensing issues in SCADA (Supervisory Control And Data Acquisition) systems. Our approach uses the incorporated PGMs to model the uncertainty reasoning and decision making processes of agents situated in a stochastic environment. In particular, we use Bayesian networks to reason about an agent’s beliefs about the environment based on its sensory observations, and select optimal plans according to the utilities of actions defined in influence diagrams. This approach takes the advantage of the scalability of the BDI architecture and the uncertainty reasoning capability of PGMs. We present a prototype of the proposed approach using a transit scenario to validate its effectiveness.

Can(Plan)+: Extending the Operational Semantics of the BDI Architecture to deal with Uncertain Information

The BDI architecture, where agents are modelled based on their beliefs, desires and intentions, provides a practical approach to develop large scale systems. However, it is not well suited to model complex Supervisory Control And Data Acquisition (SCADA) systems pervaded by uncertainty. In this paper we address this issue by extending the operational semantics of Can(Plan) into Can(Plan)+. We start by modelling the beliefs of an agent as a set of epistemic states where each state, possibly using a different representation, models part of the agent's beliefs. These epistemic states are stratified to make them commensurable and to reason about the uncertain beliefs of the agent. The syntax and semantics of a BDI agent are extended accordingly and we identify fragments with computationally efficient semantics. Finally, we examine how primitive actions are affected by uncertainty and we define an appropriate form of lookahead planning.

Managing Future offshore wind power variability in a European Supergrid

The future European power system will have a hierarchical structure created by layers of system control from a Supergrid via regional high-voltage transmission through to medium and low-voltage distribution. Each level will have generation sources such as large-scale offshore wind, wave, solar thermal, nuclear directly connected to this Supergrid and high levels of embedded generation, connected to the medium-voltage distribution system. It is expected that the fuel portfolio will be dominated by offshore wind in Northern Europe and PV in Southern Europe. The strategies required to manage the coordination of supply-side variability with demand-side variability will include large scale interconnection, demand side management, load aggregation and storage in the context of the Supergrid combined with the Smart Grid. The design challenge associated with this will not only include control topology, data acquisition, analysis and communications technologies, but also the selection of fuel portfolio at a macro level. This paper quantifies the amount of demand side management, storage and so-called 'back-up generation' needed to support an 80% renewable energy portfolio in Europe by 2050. © 2013 IEEE.

Managing the variability of supply in the European power system with high wind energy penetration

The power system of the future will have a hierarchical structure created by layers of system control from via regional high-voltage transmission through to medium and low-voltage distribution. Each level will have generation sources such as large-scale offshore wind, wave, solar thermal, nuclear directly connected to this Supergrid and high levels of embedded generation, connected to the medium-voltage distribution system. It is expected that the fuel portfolio will be dominated by offshore wind in Northern Europe and PV in Southern Europe. The strategies required to manage the coordination of supply-side variability with demand-side variability will include large scale interconnection, demand side management, load aggregation and storage in the concept of the Supergrid combined with the Smart Grid. The design challenge associated with this will not only include control topology, data acquisition, analysis and communications technologies, but also the selection of fuel portfolio at a macro level. This paper quantifies the amount of demand side management, storage and so-called ‘back-up generation’ needed to support an 80% renewable energy portfolio in Europe by 2050.

Parents’ and young people’s involvement in designing a trial of ventilator weaning

Consulting with users is considered best practice and is highly recommended in designing new trials. As part of our feasibility work, we undertook a consultation exercise with parents, ex-patients and young people prior to designing a trial of protocol-based ventilator weaning. Our aims were to (1) ascertain views on the relevance and importance of the trial; (2) determine the important parent/patient outcome measures; and (3) ascertain views on informed consent in a cluster randomized controlled trial. We conducted audio-recorded face-to-face, telephone and focus group interviews with parents and young people. Data were content analysed to generate information to address our specific consultation objectives. The setting was the north-western region of England. A total of 16 participants were interviewed: 2 parents of paediatric intensive care unit (PICU) survivors; 1 PICU survivor; and 13 young people from the former Medicines for Children Research Network. The trial objectives were deemed important and relevant, and participants considered the most important outcome measure to be the length of time on ventilation. Parents and young people did not consider written informed consent to be a necessary requirement in the context of this trial, rather awareness of unit participation in the trial was important with the opportunity of opting out of data collection. This consultation provided useful, pragmatic insights to inform trial design. We encountered significant challenges in recruiting parents and young people for this consultation exercise, and novel recruitment methods need to be considered for future work in this field. Patient and public involvement is essential to ensure that future trials answer parent-relevant questions and have meaningful outcome measures, as well as involving parents and young people in the general development of health care services.

A Review of Indirect Bridge Monitoring Using Passing Vehicles

Indirect bridge monitoring methods, using the responses measured from vehicles passing over bridges, are under development for about a decade. A major advantage of these methods is that they use sensors mounted on the vehicle, no sensors or data acquisition system needs to be installed on the bridge. Most of the proposed methods are based on the identification of dynamic characteristics of the bridge from responses measured on the vehicle, such as natural frequency, mode shapes, and damping. In addition, some of the methods seek to directly detect bridge damage based on the interaction between the vehicle and bridge. This paper presents a critical review of indirect methods for bridge monitoring and provides discussion and recommendations on the challenges to be overcome for successful implementation in practice.