Deep Packet Inspection for Enhanced Security in Microgrids: A Focus on the Modbus RTU Protocol

The Modbus protocol, widely used for device-to-device communication in Microgrids, lacks inherent security features, making it vulnerable to external attacks. To address this security vulnerabilities of the Modbus, we propose Deep Packet Inspection (DPI) technology protocol. DPI performs in-depth an...

Full description

Saved in:
Bibliographic Details
Main Authors: Lee, JaeHyun, Joo, JeongHyun, Kang, HeeWoon, Kwon, YooJin
Format: Conference Proceeding
Language:English
Subjects:
Deep Packet Inspection
Filtering
Inspection
Logic gates
Microgrids
Modbus RTU
Payloads
Performance evaluation
Prevention and mitigation
Protocols
Real-time systems
Security
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
cited_by
cites
container_end_page 632
container_issue
container_start_page 631
container_title
container_volume
creator Lee, JaeHyun
Joo, JeongHyun
Kang, HeeWoon
Kwon, YooJin
description The Modbus protocol, widely used for device-to-device communication in Microgrids, lacks inherent security features, making it vulnerable to external attacks. To address this security vulnerabilities of the Modbus, we propose Deep Packet Inspection (DPI) technology protocol. DPI performs in-depth analysis of not only packet headers containing transmission paths but also payload content from the application layer, enabling real-time detection and prevention of maliciously tampered packets, damaged communication packets, and incorrectly generated packets due to field device malfunctions. Furthermore, this study presents practical examples of applying the implemented DPI filtering technology to distributed energy resource(DER) gateway within the grid, demonstrating how DPI can detect and prevent cyber attacks in power networks.
doi_str_mv 10.23919/CMD62064.2024.10766320
format conference_proceeding
fullrecord <record><control><sourceid>ieee_CHZPO</sourceid><recordid>TN_cdi_ieee_primary_10766320</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><ieee_id>10766320</ieee_id><sourcerecordid>10766320</sourcerecordid><originalsourceid>FETCH-ieee_primary_107663203</originalsourceid><addsrcrecordid>eNqFjr1OwzAURg1SpRboG1TivkDD9U1wHDbUH8EQqYJWYqIKzi01FDuy3aFv3wwwM306Omf4hLiVmFFeyepuVs8VoSoyQioyiaVSOeGFuNKVVvcSicpLMSJVFFMq5dtQjGP8QsQ-yrXWI_E-Z-5g1ZhvTvDsYscmWe9g5wMs3L5xhlt4ZXMMNp3AOqitCf4z2DY-wCMsvTlG6Pu0Z6h9-9HTy3oDq-CTN_5wIwa75hB5_LvXYrJcrGdPU8vM2y7Ynyactn-_83_0GaFkRfw</addsrcrecordid><sourcetype>Publisher</sourcetype><iscdi>true</iscdi><recordtype>conference_proceeding</recordtype></control><display><type>conference_proceeding</type><title>Deep Packet Inspection for Enhanced Security in Microgrids: A Focus on the Modbus RTU Protocol</title><source>IEEE Xplore All Conference Series</source><creator>Lee, JaeHyun ; Joo, JeongHyun ; Kang, HeeWoon ; Kwon, YooJin</creator><creatorcontrib>Lee, JaeHyun ; Joo, JeongHyun ; Kang, HeeWoon ; Kwon, YooJin</creatorcontrib><description>The Modbus protocol, widely used for device-to-device communication in Microgrids, lacks inherent security features, making it vulnerable to external attacks. To address this security vulnerabilities of the Modbus, we propose Deep Packet Inspection (DPI) technology protocol. DPI performs in-depth analysis of not only packet headers containing transmission paths but also payload content from the application layer, enabling real-time detection and prevention of maliciously tampered packets, damaged communication packets, and incorrectly generated packets due to field device malfunctions. Furthermore, this study presents practical examples of applying the implemented DPI filtering technology to distributed energy resource(DER) gateway within the grid, demonstrating how DPI can detect and prevent cyber attacks in power networks.</description><identifier>EISSN: 2644-271X</identifier><identifier>EISBN: 8986510227</identifier><identifier>EISBN: 9788986510225</identifier><identifier>DOI: 10.23919/CMD62064.2024.10766320</identifier><language>eng</language><publisher>The Korean Institute of Electrical Engineers (KIEE)</publisher><subject>Deep Packet Inspection ; Filtering ; Inspection ; Logic gates ; Microgrids ; Modbus RTU ; Payloads ; Performance evaluation ; Prevention and mitigation ; Protocols ; Real-time systems ; Security</subject><ispartof>IEEE International Conference on Condition Monitoring and Diagnosis (Online), 2024, p.631-632</ispartof><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://ieeexplore.ieee.org/document/10766320$$EHTML$$P50$$Gieee$$H</linktohtml><link.rule.ids>309,310,780,784,789,790,23930,23931,25140,27925,54555,54932</link.rule.ids><linktorsrc>$$Uhttps://ieeexplore.ieee.org/document/10766320$$EView_record_in_IEEE$$FView_record_in_$$GIEEE</linktorsrc></links><search><creatorcontrib>Lee, JaeHyun</creatorcontrib><creatorcontrib>Joo, JeongHyun</creatorcontrib><creatorcontrib>Kang, HeeWoon</creatorcontrib><creatorcontrib>Kwon, YooJin</creatorcontrib><title>Deep Packet Inspection for Enhanced Security in Microgrids: A Focus on the Modbus RTU Protocol</title><title>IEEE International Conference on Condition Monitoring and Diagnosis (Online)</title><addtitle>CMD</addtitle><description>The Modbus protocol, widely used for device-to-device communication in Microgrids, lacks inherent security features, making it vulnerable to external attacks. To address this security vulnerabilities of the Modbus, we propose Deep Packet Inspection (DPI) technology protocol. DPI performs in-depth analysis of not only packet headers containing transmission paths but also payload content from the application layer, enabling real-time detection and prevention of maliciously tampered packets, damaged communication packets, and incorrectly generated packets due to field device malfunctions. Furthermore, this study presents practical examples of applying the implemented DPI filtering technology to distributed energy resource(DER) gateway within the grid, demonstrating how DPI can detect and prevent cyber attacks in power networks.</description><subject>Deep Packet Inspection</subject><subject>Filtering</subject><subject>Inspection</subject><subject>Logic gates</subject><subject>Microgrids</subject><subject>Modbus RTU</subject><subject>Payloads</subject><subject>Performance evaluation</subject><subject>Prevention and mitigation</subject><subject>Protocols</subject><subject>Real-time systems</subject><subject>Security</subject><issn>2644-271X</issn><isbn>8986510227</isbn><isbn>9788986510225</isbn><fulltext>true</fulltext><rsrctype>conference_proceeding</rsrctype><creationdate>2024</creationdate><recordtype>conference_proceeding</recordtype><sourceid>6IE</sourceid><recordid>eNqFjr1OwzAURg1SpRboG1TivkDD9U1wHDbUH8EQqYJWYqIKzi01FDuy3aFv3wwwM306Omf4hLiVmFFeyepuVs8VoSoyQioyiaVSOeGFuNKVVvcSicpLMSJVFFMq5dtQjGP8QsQ-yrXWI_E-Z-5g1ZhvTvDsYscmWe9g5wMs3L5xhlt4ZXMMNp3AOqitCf4z2DY-wCMsvTlG6Pu0Z6h9-9HTy3oDq-CTN_5wIwa75hB5_LvXYrJcrGdPU8vM2y7Ynyactn-_83_0GaFkRfw</recordid><startdate>20241020</startdate><enddate>20241020</enddate><creator>Lee, JaeHyun</creator><creator>Joo, JeongHyun</creator><creator>Kang, HeeWoon</creator><creator>Kwon, YooJin</creator><general>The Korean Institute of Electrical Engineers (KIEE)</general><scope>6IE</scope><scope>6IL</scope><scope>CBEJK</scope><scope>RIE</scope><scope>RIL</scope></search><sort><creationdate>20241020</creationdate><title>Deep Packet Inspection for Enhanced Security in Microgrids: A Focus on the Modbus RTU Protocol</title><author>Lee, JaeHyun ; Joo, JeongHyun ; Kang, HeeWoon ; Kwon, YooJin</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-ieee_primary_107663203</frbrgroupid><rsrctype>conference_proceedings</rsrctype><prefilter>conference_proceedings</prefilter><language>eng</language><creationdate>2024</creationdate><topic>Deep Packet Inspection</topic><topic>Filtering</topic><topic>Inspection</topic><topic>Logic gates</topic><topic>Microgrids</topic><topic>Modbus RTU</topic><topic>Payloads</topic><topic>Performance evaluation</topic><topic>Prevention and mitigation</topic><topic>Protocols</topic><topic>Real-time systems</topic><topic>Security</topic><toplevel>online_resources</toplevel><creatorcontrib>Lee, JaeHyun</creatorcontrib><creatorcontrib>Joo, JeongHyun</creatorcontrib><creatorcontrib>Kang, HeeWoon</creatorcontrib><creatorcontrib>Kwon, YooJin</creatorcontrib><collection>IEEE Electronic Library (IEL) Conference Proceedings</collection><collection>IEEE Proceedings Order Plan All Online (POP All Online) 1998-present by volume</collection><collection>IEEE Xplore All Conference Proceedings</collection><collection>IEEE Xplore (Online service)</collection><collection>IEEE Proceedings Order Plans (POP All) 1998-Present</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>Lee, JaeHyun</au><au>Joo, JeongHyun</au><au>Kang, HeeWoon</au><au>Kwon, YooJin</au><format>book</format><genre>proceeding</genre><ristype>CONF</ristype><atitle>Deep Packet Inspection for Enhanced Security in Microgrids: A Focus on the Modbus RTU Protocol</atitle><btitle>IEEE International Conference on Condition Monitoring and Diagnosis (Online)</btitle><stitle>CMD</stitle><date>2024-10-20</date><risdate>2024</risdate><spage>631</spage><epage>632</epage><pages>631-632</pages><eissn>2644-271X</eissn><eisbn>8986510227</eisbn><eisbn>9788986510225</eisbn><abstract>The Modbus protocol, widely used for device-to-device communication in Microgrids, lacks inherent security features, making it vulnerable to external attacks. To address this security vulnerabilities of the Modbus, we propose Deep Packet Inspection (DPI) technology protocol. DPI performs in-depth analysis of not only packet headers containing transmission paths but also payload content from the application layer, enabling real-time detection and prevention of maliciously tampered packets, damaged communication packets, and incorrectly generated packets due to field device malfunctions. Furthermore, this study presents practical examples of applying the implemented DPI filtering technology to distributed energy resource(DER) gateway within the grid, demonstrating how DPI can detect and prevent cyber attacks in power networks.</abstract><pub>The Korean Institute of Electrical Engineers (KIEE)</pub><doi>10.23919/CMD62064.2024.10766320</doi></addata></record>
fulltext fulltext_linktorsrc
identifier EISSN: 2644-271X
ispartof IEEE International Conference on Condition Monitoring and Diagnosis (Online), 2024, p.631-632
issn 2644-271X
language eng
recordid cdi_ieee_primary_10766320
source IEEE Xplore All Conference Series
subjects Deep Packet Inspection
Filtering
Inspection
Logic gates
Microgrids
Modbus RTU
Payloads
Performance evaluation
Prevention and mitigation
Protocols
Real-time systems
Security
title Deep Packet Inspection for Enhanced Security in Microgrids: A Focus on the Modbus RTU Protocol
url http://sfxeu10.hosted.exlibrisgroup.com/loughborough?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-27T13%3A02%3A24IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-ieee_CHZPO&rft_val_fmt=info:ofi/fmt:kev:mtx:book&rft.genre=proceeding&rft.atitle=Deep%20Packet%20Inspection%20for%20Enhanced%20Security%20in%20Microgrids:%20A%20Focus%20on%20the%20Modbus%20RTU%20Protocol&rft.btitle=IEEE%20International%20Conference%20on%20Condition%20Monitoring%20and%20Diagnosis%20(Online)&rft.au=Lee,%20JaeHyun&rft.date=2024-10-20&rft.spage=631&rft.epage=632&rft.pages=631-632&rft.eissn=2644-271X&rft_id=info:doi/10.23919/CMD62064.2024.10766320&rft.eisbn=8986510227&rft.eisbn_list=9788986510225&rft_dat=%3Cieee_CHZPO%3E10766320%3C/ieee_CHZPO%3E%3Cgrp_id%3Ecdi_FETCH-ieee_primary_107663203%3C/grp_id%3E%3Coa%3E%3C/oa%3E%3Curl%3E%3C/url%3E&rft_id=info:oai/&rft_id=info:pmid/&rft_ieee_id=10766320&rfr_iscdi=true