Towards feature engineering for intrusion detection in IEC-61850 communication networks

Quincozes, Vagner; Ereno Quincozes, Silvio; Passos, Diego; Albuquerque, Célio; Mosse, Daniel

Publication

Towards feature engineering for intrusion detection in IEC-61850 communication networks

2024-02-03Research article

authorProfile.email	biblioteca@isel.pt
datacite.subject.fos	Engenharia e Tecnologia::Engenharia Eletrotécnica, Eletrónica e Informática
dc.contributor.author	Quincozes, Vagner
dc.contributor.author	Ereno Quincozes, Silvio
dc.contributor.author	Passos, Diego
dc.contributor.author	Albuquerque, Célio
dc.contributor.author	Mosse, Daniel
dc.date.accessioned	2025-09-11T13:40:37Z
dc.date.available	2025-09-11T13:40:37Z
dc.date.issued	2024-02-03
dc.description.abstract	Digital electrical substations are fundamental in providing a reliable basis for smart grids. However, the deployment of the IEC-61850 standards for communication between intelligent electronic devices (IEDs) brings new security challenges. Intrusion detection systems (IDSs) play a vital role in ensuring the proper function of digital substations services. However, the current literature lacks efficient IDS solutions for certain classes of attacks, such as the masquerade attack. In this work, we propose the extraction and correlation of relevant multi-layer information through a feature engineering process to enable the deployment of machine learning-based IDSs in digital substations. Our results demonstrate that the proposed solution can detect attacks that are considered challenging in the literature, attaining an F1-score of up to 95.6% in the evaluated scenarios.	eng
dc.identifier.citation	Quincozes, V. E., Quincozes, S. E., Passos, D., Albuquerque, C., & Mosse, D. (2024). Towards feature engineering for intrusion detection in IEC-61850 communication networks. Annals of Telecommunications. 79(7-8), SI, 537-551. https://doi.org/10.1007/s12243-024-01011-x
dc.identifier.doi	https://doi.org/10.1007/s12243-024-01011-x
dc.identifier.eissn	1958-9395
dc.identifier.issn	0003-4347
dc.identifier.uri	http://hdl.handle.net/10400.21/22135
dc.language.iso	eng
dc.peerreviewed	yes
dc.publisher	Springer
dc.relation.hasversion	https://link.springer.com/article/10.1007/s12243-024-01011-x
dc.relation.ispartofseries	SI
dc.rights.uri	http://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subject	Feature extraction
dc.subject	Intrusion detection systems (IDSs)
dc.subject	Intrusion detection systems IDSs
dc.subject	Machine learning ML
dc.subject	Digital substations
dc.subject	IEC-61850
dc.title	Towards feature engineering for intrusion detection in IEC-61850 communication networks	eng
dc.type	research article
dspace.entity.type	Publication
oaire.citation.endPage	551
oaire.citation.issue	7-8
oaire.citation.startPage	537
oaire.citation.title	Annals of Telecommunications
oaire.citation.volume	79
oaire.version	http://purl.org/coar/version/c_be7fb7dd8ff6fe43
person.familyName	Quincozes
person.familyName	Ereno Quincozes
person.familyName	Passos
person.familyName	Albuquerque
person.givenName	Vagner
person.givenName	Silvio
person.givenName	Diego
person.givenName	Célio
person.identifier.orcid	0000-0002-6688-5572
person.identifier.orcid	0000-0001-6793-4033
person.identifier.orcid	0000-0002-9707-1176
person.identifier.orcid	0000-0002-7959-6569
person.identifier.rid	ACS-4328-2022
person.identifier.rid	O-4975-2015
person.identifier.scopus-author-id	57773301200
person.identifier.scopus-author-id	57191616602
person.identifier.scopus-author-id	24478915900
person.identifier.scopus-author-id	15836551100
relation.isAuthorOfPublication	543a9e4e-85a2-4f78-b3e2-9bc970c07de3
relation.isAuthorOfPublication	bd52eb9a-ae55-4389-8950-934670c79c03
relation.isAuthorOfPublication	1baae68b-74ca-4d47-9c93-d990147ada03
relation.isAuthorOfPublication	7123bd56-5154-4351-bc80-e5c8bbacf15a
relation.isAuthorOfPublication.latestForDiscovery	543a9e4e-85a2-4f78-b3e2-9bc970c07de3