Sherlock: A Dataset for Process-aware Intrusion Detection Research on Power Grid Networks
By: Eric Wagner , Lennart Bader , Konrad Wolsing and more
Potential Business Impact:
Helps stop power grid cyberattacks.
Physically distributed components and legacy protocols make the protection of power grids against increasing cyberattack threats challenging. Infamously, the 2015 and 2016 blackouts in Ukraine were caused by cyberattacks, and the German Federal Office for Information Security (BSI) recorded over 200 cyber incidents against the German energy sector between 2023 and 2024. Intrusion detection promises to quickly detect such attacks and mitigate the worst consequences. However, public datasets of realistic scenarios are vital to evaluate these systems. This paper introduces Sherlock, a dataset generated with the co-simulator Wattson. In total, Sherlock covers three scenarios with various attacks manipulating the process state by injecting malicious commands or manipulating measurement values. We additionally test five recently-published intrusion detection systems on Sherlock, highlighting specific challenges for intrusion detection in power grids. Dataset and documentation are available at https://sherlock.wattson.it/.
Similar Papers
Mind the Gap: Missing Cyber Threat Coverage in NIDS Datasets for the Energy Sector
Cryptography and Security
Finds weaknesses in power grid computer defenses.
Cybersecurity Assessment of Smart Grid Exposure Using a Machine Learning Based Approach
Machine Learning (CS)
Finds computer attacks on power grids.
Cyber-Resilient System Identification for Power Grid through Bayesian Integration
Systems and Control
Protects power grids from sneaky cyberattacks.