Importance

Loading Importance Indicators...

Abstract

Systems and methods of detecting an attack in a utility grid are described. An anomaly detector establishes a first metric generated using signals received from at least one of one or more controllers of the utility grid or one or more metering devices of the utility grid. The first metric identifies nominal behavior of control or consumption in the utility grid absent anomalies. The anomaly detector monitors signals received from the controllers or the metering devices. The anomaly detector determines, using the monitored signals, a second metric identifying current behavior of at least one of control or consumption in the utility grid. The anomaly detector compares the first metric with the second metric to detect an anomaly in control or consumption in the utility grid. The anomaly is attributable to an attack on a controller or a metering device. The anomaly detector provides an alert indicating the detected anomaly.

Loading the Abstract Image...

First Claim