Security and Resiliency Analytics for Smart Grids: Static and Dynamic Approaches (Advances in Information Security)
暫譯: 智慧電網的安全性與韌性分析：靜態與動態方法（資訊安全進展）
Ehab Al-Shaer, Mohammad Ashiqur Rahman
相關主題
商品描述
This book targets the key concern of protecting critical infrastructures such as smart grids. It explains various static and dynamic security analysis techniques that can automatically verify smart grid security and resiliency and identify potential attacks in a proactive manner.
This book includes three main sections. The first presents the idea of formally verifying the compliance of smart grid configurations with the security and resiliency guidelines. It provides a formal framework that verifies the compliance of the advanced metering infrastructure (AMI) configurations with the security and resiliency requirements, and generates remediation plans for potential security violations. The second section covers the formal verification of the security and resiliency of smart grid control systems by using a formal model to analyze attack evasions on state estimation, a core control module of the supervisory control system in smart grids. The model identifies attack vectors that can compromise state estimation. This section also covers risk mitigation techniques that synthesize proactive security plans that make such attacks infeasible. The last part of the book discusses the dynamic security analysis for smart grids. It shows that AMI behavior can be modeled using event logs collected at smart collectors, which in turn can be verified using the specification invariants generated from the configurations of the AMI devices.
Although the focus of this book is smart grid security and resiliency, the included formal analytics are generic enough to be extended to other cyber-physical systems, especially those related to industrial control systems (ICS). Therefore, industry professionals and academic researchers will find this book an exceptional resource to learn theoretical and practical aspects of applying formal methods for the protection of critical infrastructures.
商品描述(中文翻譯)
本書針對保護關鍵基礎設施（如智慧電網）的主要關注點進行探討。它解釋了各種靜態和動態安全分析技術，這些技術可以自動驗證智慧電網的安全性和韌性，並以主動的方式識別潛在攻擊。
本書包括三個主要部分。第一部分介紹了正式驗證智慧電網配置是否符合安全性和韌性指導方針的概念。它提供了一個正式框架，用於驗證先進計量基礎設施（AMI）配置是否符合安全性和韌性要求，並生成潛在安全違規的修正計劃。第二部分涵蓋了智慧電網控制系統的安全性和韌性的正式驗證，通過使用正式模型分析對狀態估計的攻擊規避，狀態估計是智慧電網監控控制系統的核心控制模組。該模型識別可能危害狀態估計的攻擊向量。本部分還涵蓋了風險緩解技術，這些技術合成主動安全計劃，使此類攻擊變得不可行。書的最後一部分討論了智慧電網的動態安全分析。它顯示AMI行為可以使用在智慧收集器收集的事件日誌進行建模，這些日誌又可以使用從AMI設備配置生成的規範不變量進行驗證。
儘管本書的重點是智慧電網的安全性和韌性，但所包含的正式分析足夠通用，可以擴展到其他網路物理系統，特別是與工業控制系統（ICS）相關的系統。因此，業界專業人士和學術研究人員將會發現本書是學習應用正式方法以保護關鍵基礎設施的理論和實踐方面的卓越資源。
