We investigate deep learning based omni intrusion detection system (IDS) for supervisory control and data acquisition (SCADA) networks that are capable of detecting both temporally uncorrelated and correlated attacks. Regarding the IDSs developed in this paper, a feedforward neural network (FNN) can detect temporally uncorrelated attacks at an F1 of 99.967±0.005% but correlated attacks as low as 58±2%. In contrast, long-short term memory (LSTM) detects correlated attacks at 99.56±0.01% while uncorrelated attacks at 99.3±0.1%. Combining LSTM and FNN through an ensemble approach further improves the IDS performance with F1 of 99.68±0.04% regardless the temporal correlations among the data packets. / Graduate

The transition from fossil fuel-based energy sources involves exploring different sources of energy that can be reliably integrated into the power grid. One such existing resource is the CHPs, which are distributed throughout the US electric grid. The integration of the CHPs into the grid requires technological innovations. One idea is to design an F-CHP converter that would facilitate the CHPs to interconnect seamlessly with the electrical grid. This thesis presents the development and testing of different components of a testbed that would facilitate the testing of the F-CHP converter. It also presents the integration of a PMU and a communication interface for the F-CHP converter. The phasor estimation of the F-CHP PMU has been compared with a commercial PMU and its performance has been validated. / Master of Science / The transition from fossil fuel based energy sources involves exploring different sources of energy that can reliably integrated into the power grid. One such existing resource is the CHPs, that are distributed throughout the US electric grid. The integration of the CHPs into the grid required technological innovations. One idea is to design a power electronics converter that would facilitate the CHPs to connect with the electrical grid. This thesis presents the development and testing of different components of a testbed that would facilitate the testing of the converter. This work also integrates a technology for estimating the voltage and current at the point of interconnection between the converter and the electrical grid.

Les besoins de nouveaux services dans les rames ferroviaires ( le comptage, l’efficience énergétique, le confort et la sécurité des passagers etc.), risquent de saturer à terme les systèmes de communication filaires mis en place il y a une vingtaine d’années. Les réseaux de capteurs sans fil, par leurs avantages (déploiement facile, capacité à s’adapter à plusieurs types d’environnements, faible consommation d’énergie), ouvrent de nombreuses perspectives pour les systèmes de gestion énergétique. Le but de ce travail de thèse est d’étudier et mettre en oeuvre un réseau de capteurs sans fil à l’intérieur des trains pour l’efficience énergétique. Ainsi, quelques protocoles de communication dédiés à la gestion énergétique ont été présentés puis une étude comparative des différents réseaux de communication sans fil réalisée. Cette étude comparative a permis de faire le choix du réseau ZigBee comme étant le plus adéquat pour la plateforme. L’architecture hybride proposée permet l’utilisation du réseau IP existant comme colonne vertébrale de l’ensemble des réseaux ZigBee. Afin de tenir compte de l’effet de l’environnement ferroviaire dans la planification et le déploiement du réseau, une étude du canal de propagation, basée sur des mesures réalisées dans un métro et un wagon de RER a été menée. L’impact de la coexistence entre le ZigBee et le WiFi et de la présence humaine sur la communication du réseau sans fil a été démontré. Le prototype d’une plateforme basée sur le réseau ZigBee allant de la collecte des données à l’affichage des informations a été réalisé et testé. / The need of new services in railway trains (services for metering, energy efficiency, the comfort and safety of users etc.) may eventually saturate the wired communication systems installed since twenty years ago years. The several advantages of wireless sensor networks (easy deployment, ability to adapt on different environments and low energy consumption) offer many possibilities for energy management systems. The aim of this thesis is to study and implement a wireless network sensors inside trains for energy efficiency. Thus, some communication protocols dedicated to energy management were presented and then a comparative study of the various wireless communication networks carried out. This comparative study shows that the ZigBee network is the most suitable for the platform. The proposed hybrid architecture allows the use of the existing IP network as the backbone of all ZigBee networks. In order to take into account the effect of the railway environment in the planning and deployment of the network, a study of the propagation channel was carried out, based on measurements realized in a subway and a RER car. The impact of the coexistence between ZigBee and WiFi and of the human presence on wireless communication have been demonstrated. The prototype of a platform based on the ZigBee network, allows data collection, informations traitement and monitoring, was carried out.

Detta arbete var beställt av Sjöfartshögskolan i Kalmar. Skolan ville ha en enhet som kunde mäta aktiv-, reaktiv- och skenbar effekt, ström, spänning, frekvens och cosϕ på en generator och som kommunicerade vidare dessa värden till en PLC. Detta för att kunna lastfördela lasten mellan ett antal generatorer i kursen Tillämpad elteknik 15 hp där studenterna bygger en generatorinstallation med tre generatorer. Ett funktionsblock för lastfördelning skulle också programmeras. Prototypen som konstruerades baserades på en Arduino Ethernet och kommunikationen löstes med Modbus TCP/IP över Ethernet. Ett lastfördelningsprogram programmerades i form av ett funktionsblock som studenterna kunde importera till CoDeSys v2.3 och använda i sina installationer. Prototypen kunde läsa av värdena med ungefär samma noggrannhet som ett kommersiellt instrument som använder sig av samma mätteknik som prototypen. Uppdateringsfrekvensen var dock lägre än hos ett kommersiellt instrument. Kommunikationen med PLC:n fungerade utan problem. Då ingen undervisning hölls i arbetets slutskede kunde inte lastfördelningen testas på en fullskalig anläggning. Lastfördelningsprogrammet klarade dock av att hålla rätt frekvens på en ensam generator och fungerade som tänkt när programmet testades i en simulator. Prototypen gav fel mätvärden vid kapacitiv last. Vid jämförelse med en kommersiell tångamperemeter visade sig mätfelet bero på mätmetoden då båda gav liknande resultat. Som referens användes en professionell elkvalitetsanalysator. Alla uppdragsgivarens krav blev uppfyllda och arbetet kommer att kunna användas i undervisningen. / This thesis was ordered by Kalmar Maritime Academy. The request was for a device that could measure active, reactive and apparent power, as well as frequency, voltage, current and cosϕ on a generator. The measured values would be communicated to a PLC for use in a load sharing program between a number of generators in the course Tillämpad elteknik, 15 ECTS. In that course the students constructs a three-generator electric power grid. Included in the request was also to program a load sharing program. The prototype being constructed was based on the Arduino Ethernet, and the communication was enabled by means of the Modbus TCP/IP protocol over Ethernet. A load sharing program was created in the form of a function block which the student could import into the CoDeSys for use in the generator systems. The prototype could measure values with close to the same accuracy as a commercial available instrument that were using the same technique for measuring. The refresh rate was however lower than the commercial available instrument. Communication with the PLC worked without any issues. No full-scale testing could be done since no course was held during the final stages of the thesis, however the load sharing program could keep frequency on a single generator alone and worked in a simulated soft environment. Measuring errors occurred when measuring a capacitive load. When comparing to a commercial available clamp meter, the same errors occurred. As a reference a professional power and energy quality analyser was used. All the requests were fulfilled and the result of this thesis will be used in the educational programme at the Academy.

Made available in DSpace on 2016-12-12T17:38:32Z (GMT). No. of bitstreams: 1 Valmor adami Junior.pdf: 2047455 bytes, checksum: 187f8ff4aa0a56d336eb7ace3df5bba8 (MD5) Previous issue date: 2006-02-24 / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / This dissertation presents the research and the practical work carried through aiming the implementation of a multiplatform software for handheld computers that allows the monitoring, parameterization and supervision of industrial equipments. Moreover, that possess an interface that makes possible: the visualization of an equipment network, the remote access to the equipment through virtual HMIs, and the generation of graphs of sampled data. So, the studies carried on handheld computers, its characteristics and programming tools, industrial networks, the Modbus protocol and the monitoring, the parameterization and the supervision of industrial equipment are presented. Moreover, the characteristic of two equipment used for the development of this work, the CFW-09 frequency inverter manufactured by WEG Automation and the power regulator GRMP-03 manufactured by Grameyer Ltda, are shown. Regarding the practical activities, the implementation of a set of classes in Java language using the SuperWaba platform is presented and its use in the project and development of softwares for parameterization and monitoring of the CFW-09 and the GRMP-03, called SuperDrivePalm and GRMPalm, respectively. Also, it is presented the creation of a supervision module for industrial equipments that can be added to those softwares. The gotten results show that the creation of a multiplatform software for the considered ends is viable, but the time behavior, measured during the practical tests of the SuperDrivePalm and the supervision module, shows that its still necessity to optimize some algorithms and that the use of a more specific virtual machine for the new PDA microprocessors can take performance improvements. / Esta dissertação apresenta a pesquisa e o trabalho prático realizados visando a implementação de um software multiplataforma para computadores de mão que permita efetuar o monitoramento, a parametrização e a supervisão de equipamentos industriais. Além disso, que possua uma interface que possibilite a visualização de uma rede de equipamentos, o acesso remoto aos equipamentos através de IHMs virtuais e a geração de gráficos referentes à valores amostrados. Dessa forma, são apresentados os estudos realizados sobre computadores de mão, suas características e ferramentas de programação, redes industriais, o protocolo Modbus e o monitoramento, a parametrização e a supervisão de equipamentos industriais. Além disso, são apresentadas características de dois equipamentos utilizados para o desenvolvimento deste trabalho, o inversor de freqüência CFW-09 fabricado pela Weg Automação e o regulador de tensão GRMP-03 fabricado pela Grameyer Ltda. Quanto às atividades práticas, é apresentada a implementação de um conjunto de classes em linguagem Java utilizando a plataforma SuperWaba e a sua utilização no projeto e desenvolvimento de softwares para parametrização e monitoramento do CFW-09 e do GRMP-03, chamados de SuperDrivePalm e de GRMPalm, respectivamente. Também será apresentada sua utilização na criação de um módulo de supervisão de equipamentos que pode ser agregado aos dois softwares. Os resultados obtidos mostram que é viável a criação de um software multiplataforma para os fins propostos, mas o comportamento temporal, medido durante os testes práticos realizados com o SuperDrivePalm e o módulo de supervisão, mostra que ainda existe a necessidade de otimização em alguns algoritmos e que a utilização de uma máquina virtual mais específica para os novos microprocessadores dos PDAs pode levar a melhorias de performance.

Made available in DSpace on 2014-12-17T14:55:38Z (GMT). No. of bitstreams: 1 TiagoHK.pdf: 2636025 bytes, checksum: ce24354f7859d7a6bcea2ea448265402 (MD5) Previous issue date: 2009-06-07 / This work presents a packet manipulation tool developed to realize tests in industrial devices that implements TCP/IP-based communication protocols. The tool was developed in Python programming language, as a Scapy extension. This tool, named IndPM- Industrial Packet Manipulator, can realize vulnerability tests in devices of industrial networks, industrial protocol compliance tests, receive server replies and utilize the Python interpreter to build tests. The Modbus/TCP protocol was implemented as proof-of-concept. The DNP3 over TCP protocol was also implemented but tests could not be realized because of the lack of resources. The IndPM results with Modbus/TCP protocol show some implementation faults in a Programmable Logic Controller communication module frequently utilized in automation companies / Neste trabalho ? apresentada uma ferramenta de manipula??o de pacotes destinada ? realiza??o de testes em dispositivos que implementam protocolos de comunica??o baseados em TCP/IP utilizados em redes industriais. A ferramenta foi desenvolvida em linguagem de programa??o Python, como uma extens?o ao Scapy. Esta ferramenta, denominada IndPM - Industrial Packet Manipulator, permite testar os dispositivos presentes em redes industriais em rela??o a poss?veis vulnerabilidades, realizar testes de conformidade de protocolos, coletar respostas de servidores existentes nas redes e utilizar os recursos do interpretador Python para compor testes. Como prova de conceito, foi implementado o protocolo Modbus/TCP. O protocolo DNP3 sobre TCP tamb?m foi implementado, mas n?o foi testado por indisponibilidade de recursos. Os resultados dos testes obtidos com a manipula??o de pacotes Modbus/TCP mostram falhas de implementa??o em um m?dulo de comunica??o para um Controlador L?gico Program?vel bastante utilizado na ind?stria

This diploma project summarizes a theoretical introduction regarding the issue of traffic light control. Further there is industrial communication discussed, where they are the Ethernet / IP protocol and the Modbus TCP protocol described more in detail. The following is the description of the Logix series programmable controllers. Then the diploma follows up with market research in order to find the most suitable development kit which is used as a trial prototype. Then it is concerned with a development kit with a communication module from AND-TECH company. Software was developed on them, more specifically a library for processor ports, memory and the Modbus TCP protocol. After verifying the functionality of the software, the hardware design was started. From the first site it is development kit and module and from the second site there are input and output circuits. There must be the assessment of the results found during the test operation. The end of the document describes incorrect steps that were repaired in hardware.

This Master`s thesis concern with problematic of connection analog sensors with voltage output 0-10V to a ethernet communication network. Due to a quick evolution and an application ethernet nets to industry and building technologies is possible to use this solution for connection remote diagnostics and setting of existing analog sensors without bus communication interfaces on instrumentation level of field bus networks. The converter is based on Rabbit module, which can be used like webserver for setting, calibration and data recording. For purpose of wide converter use the data output will be purvey on ethernet interface by Modbus TCP and on asynchronous serial interface RS232. First part of thesis is aimed on description of existing solutions and introduction with principles of linearization and calibration of A/D converters. Description of communication standard Modbus TCP widely used in industry applications. Second part of thesis describes design a realization of project. Here is described equipment block diagram with detail description of each block and devices used. In the part of implementation is description of device firmware with program function description and control. Last part is engage with module function verification supported with plantz of measurements and tests. The thesis is ended with evaluation results, knowledge and detections found out in development of project.

Industrial control system or ICS is a critical part of the infrastructure in society. An example of ICS is the rail networks or energy plants like the nuclear plant. SCADA is an ICS system following a hierarchical structure. Due to the fact that a control system can be very large, monitoring remote through networks is an effective way to do so. But because of digitalization ICS or SCADA systems are vulnerable to cyber attacks that can hijack or intercept network traffic or deny legitimate user services. SCADA protocols (e.g. Modbus, DNP3) that are prone to get attacks due to not being a secure protocol make a SCADA system even more vulnerable to attacks. The paper focuses on how to best protect the network traffic between an HMI as the client and a different controller as the server from attacks. The proposed solution, the prototype, is based on the reverse proxy server setup to protect controllers from the external network traffic. Only the reverse proxy server, or gateway server, can forward a client request to the intended controller. The gateway server, a web-based solution, will be the additional security layer that encrypts the payload in the application layer using TLS version 1.2 by using HTTPS protocol, thereby protect from usual security threats. The prototype went through a penetration testing of MITM (Based on ARP-poisoning), SYN flooding, slow HTTP POST attacks. And the result indicated that the prototype was vulnerable to SYN flooding and the network traffic was intercepted by the MITM. But from the Confidentiality-Integrity-Availability (C.I.A) criteria, the prototype did uphold the integrity and confidentiality due to the TLS security and successful mitigation of certain attacks. The results and suggestions on how to improve the gateway server security were discussed, including that the testing was not comprehensive but that the result is still valuable. In conclusion, more testing in the future would most likely showcase different results, but that will only mean to better the security of the gateway server, the network that the client and gateway server runs in and the physical security of the location where the client and gateway server is located. / Industrial Control System (ICS, sve. Industriella Kontrollsystem) är en kritisk del av infrastrukturen i samhället. Ett exempel på ICS är järnvägsnät eller energianläggningar som kärnkraftverket. SCADA är ett ICS-system som följer en hierarkisk struktur. Eftersom ett kontrollsystem kan täcka stora ytor är fjärrövervakning och fjärrstyrning via nätverk ett effektivt sätt att göra det på. Men på grund av digitalisering är ICS- eller SCADA-system sårbara för cyberattacker som kan kapa nätverkstrafik eller förneka legitima användare från att nå vissa tjänster. SCADA-protokoll (t.ex. Modbus, DNP3) som är benägna att få attacker på grund av att de inte är ett säkert protokoll gör SCADA-system ännu mer sårbart för attacker. Uppsatsen fokuserar huvudsakligen på hur man bäst skyddar nätverkstrafiken mellan en HMI som klient och en annan controller som servern från attacker. Den föreslagna lösningen, prototypen, är baserad på hur en reverse proxy server är uppsatt för att skydda styrenheter från den externa nätverkstrafiken. Endast reverse proxy servern eller gateway-servern kan vidarebefordra en begäran från en klient till den avsedda styrenheten. Gateway-servern, en webbaserad lösning, kommer att vara det extra säkerhetslagret som krypterar nyttolasten (eng. payload) i applikationslagret med TLS version 1.2 med hjä lp av protokollet HTTPS, och därmed skyddar mot de mest förekommande säkerhetshot som vill se och påverka skyddad information. Prototypen genomgick en penetrationstestning av MITM (Baserat på ARP-poisoning), SYN-flooding, slow HTTP POST-attacker. Och resultatet indikerade att prototypen var sårbar för SYN-flooding och nätverkstrafiken avlyssnades genom MITM. Men baserad på kriterierna för C.I.A (sve. Konfidentialitet, Integritet och Tillgänglighet) upprätthöllprototypen integriteten och konfidentialiteten på grund av säkerhetsprotokollen TLSv1.2 och framgångsrika minskningar av vissa attacker. Resultaten och förslag på hur man kan förbättra prototypen diskuterades, inklusive att testningen inte var omfattande men att resultatet fortfarande är värdefullt. Sammanfattningsvis skulle fler tester i framtiden sannolikt visa ett helt annat resultat, men det kommer bara att innebära att förbättra säkerheten för gateway-servern, nätverket som klienten och gateway-servern kör i och den fysiska säkerheten för platsen där klienten och gateway-servern befinner sig inom.

O método VRFT (Virtual Reference Feedback Tuning) é um método baseado em dados utilizado para ajustar os parâmetros de um controlador. Uma das vantagens deste método é que não é necessário um conhecimento detalhado do modelo do processo a ser controlado. Neste trabalho é apresentado o desenvolvimento de um aplicativo Android que utiliza o método VRFT, e uma versão recursiva do mesmo, para ajustar os parâmetros de um controlador PID com base nos dados de entrada e saída coletados de um experimento realizado no processo. O experimento pode ser configurado, inicializado, monitorado, e interrompido através da aplicação móvel. Para viabilizar a comunicação com o controlador também foram desenvolvidos um gateway Bluetooth-Modbus e um protocolo de comunicação simples, que opera sobre o serviço de comunicação serial do protocolo Bluetooth. A solução proposta foi validada através de experimentos realizados em processos simulados e em um processo real, mostrando bons resultados em ambos os casos. / The Virtual Reference Feedback Tuning (VRFT) method is a data-driven method employed to tune the parameters of a controller. An advantage of this method lies in the fact that it does not need a detailed knowledge of the process model. This work presents the development of an Android application which employs the VRFT method and a newly developed recursive version of it to tune a PID controller based upon the data collected from an experiment conducted on the process. The experiment can be set up, started, monitored, and stopped from inside the mobile application. To communicate with the controller a Bluetooth-Modbus gateway and an application layer protocol, designed over the Bluetooth serial communication service, are employed, both newly developed. Finally, the entire solution is verified in two steps: first some experiments were conducted on a simulated process, then another experiment was conducted to tune a real commercial controller, both showing good results.