Cybersecurity Alert Prioritization in a Critical High Power Grid With Latent Spaces

Bibliographic Details
Title: Cybersecurity Alert Prioritization in a Critical High Power Grid With Latent Spaces
Authors: Juan Ramon Feijoo-Martinez, Alicia Guerrero-Curieses, Francisco Gimeno-Blanes, Mario Castro-Fernandez, Jose Luis Rojo-Alvarez
Source: IEEE Access, Vol 11, Pp 23754-23770 (2023)
Publisher Information: IEEE, 2023.
Publication Year: 2023
Collection: LCC:Electrical engineering. Electronics. Nuclear engineering
Subject Terms: Telecommunication security, intrusion detection, deep learning, high power, power communication, latent variables, Electrical engineering. Electronics. Nuclear engineering, TK1-9971
More Details: High-Power electric grid networks require extreme security in their associated telecommunication network to ensure protection and control throughout power transmission. Accordingly, supervisory control and data acquisition systems form a vital part of any critical infrastructure, and the safety of the associated telecommunication network from intrusion is crucial. Whereas events related to operation and maintenance are often available and carefully documented, only some tools have been proposed to discriminate the information dealing with the heterogeneous data from intrusion detection systems and to support the network engineers. In this work, we present the use of deep learning techniques, such as Autoencoders or conventional Multiple Correspondence Analysis, to analyze and prune the events on power communication networks in terms of categorical data types often used in anomaly and intrusion detection (such as addresses or anomaly description). This analysis allows us to quantify and statistically describe high-severity events. Overall, portions of alerts around 5-10% have been prioritized in the analysis as first to handle by managers. Moreover, probability clouds of alerts have been shown to configure explicit manifolds in latent spaces. These results offer a homogeneous framework for implementing anomaly detection prioritization in power communication networks.
Document Type: article
File Description: electronic resource
Language: English
ISSN: 2169-3536
Relation: https://ieeexplore.ieee.org/document/10064283/; https://doaj.org/toc/2169-3536
DOI: 10.1109/ACCESS.2023.3255101
Access URL: https://doaj.org/article/baef8933479c4603ba54db27ae5caea1
Accession Number: edsdoj.baef8933479c4603ba54db27ae5caea1
Database: Directory of Open Access Journals
More Details
ISSN:21693536
DOI:10.1109/ACCESS.2023.3255101
Published in:IEEE Access
Language:English