Improving SCADA security of a local process with a power grid model

Security of networks controlling smart grids is an important subject. The shift of the power grid towards a smart grid results in more distributed control functions, while intrusion detection of the control network mostly remains centrally based. Moreover, existing local (host-based) intrusion detection systems do not yet take into account the physical process itself. Therefore, this work proposes a local intrusion detection system, which considers the outcome of control commands on the physical process. Using two scenarios we explain the benefits of extending the current security measures with a local intrusion detection.