Toward an Applied Cyber Security Solution in IoT-Based Smart Grids: An Intrusion Detection System Approach

. 2019 Nov 14;19(22):4952. doi: 10.3390/s19224952

Algorithm 2 Cyber-Attack on DL TL and AL

** START **

01: Input ← Raw data

02: Output ← Anomaly and Normal Traffic: {Classification and Detection}

** PRE-ATTACKS **

03: Procedure: INTERCEPTION (I)

04: Action: INJECTION (Inj) or MODIFICATION (Mod)

05: Packet ← {pre-process, get DNP3 packet (dnp_pkt)}

06: DNP3 protocol ← {DataLink (DL), TransportLink (TL), ApplicationLink (AL)}

07: Attack =

{L O V A, D F C, F C A, F M I 1, F M I 2, T S M, F C M, C C_I I N}

*** SETTING-UP PARAMETERS & ATTACK LAUNCHING ***

08: LOVA ⟺

I_{(d n p_{p k t})} {M o d (D L_{l e n g t h} \leftarrow D L_{l e n g t h \pm α})}

09: DFC Flag ⟺

I_{(d n p_{p k t})} {M o d (D L_{D F C = 0} \leftarrow D L_{D F C = 1})}

10: FCA ⟺

I_{({d n p}_{p k t})} {M o d (D L_{F C} \leftarrow D L_{F C = 1})}

11: FMI1 ⟺

I_{({d n p}_{p k t})} {I n j (T L_{F M I (F I N)} \leftarrow T L_{F M I (F I N = 1)})}

12: FMI2 ⟺

I_{({d n p}_{p k t})} {I n j (T L_{F M I (F I R)} \leftarrow T L_{F M I (F I R = 0)})}

13: TSM ⟺

I_{({d n p}_{p k t})} {M o d (T L_{T S M (S e q . N u m b e r)} \leftarrow T L_{T S M (S e q . N u m b e r \pm β)})}

14: FCM1 ⟺

I_{({d n p}_{p k t})} {M o d (A L_{F C} \leftarrow A L_{F C M . r e q = 0 x 02})}

15: FCM2 ⟺

I_{({d n p}_{p k t})} {M o d (A L_{F C} \leftarrow A L_{F C M . r e q = 0 x 0 d})}

16: FCM3 ⟺

I_{({d n p}_{p k t})} {M o d (A L_{F C} \leftarrow A L_{F C M . r e q = 0 x 0 e})}

17: FCM4 ⟺

I_{({d n p}_{p k t})} {M o d (A L_{F C} \leftarrow A L_{F C M . r e q = 0 x 14})}

18: FCM5 ⟺

I_{({d n p}_{p k t})} {M o d (A L_{F C} \leftarrow A L_{F C M . r e q = 0 x 15})}

19: FCM6 ⟺

I_{({d n p}_{p k t})} {M o d (A L_{F C} \leftarrow A L_{F C M . r e q = 0 x 82})}

20: CC_INN ⟺

I_{({d n p}_{p k t})} {M o d (A L_{C C_I I N} \leftarrow A L_{C C_I I N = 1 \to 5^{t h} b i t i n 2^{n d} b y t e})}

21: If

I_{({d n p}_{p k t})}

then, //Interception of the packet

22: Attacker

I_{({d n p}_{p k t})} {{(M o d ∥ I n j)}_{D L \neg T L \neg A L}}

//Launch the attack on the layers

23: Get anomaly traffic

24: End if

25: End