Search papers, labs, and topics across Lattice.
This research introduces a hybrid Intrusion Detection System (IDS) designed for Electric Vehicle Charging Stations (EVCSs) that integrates both network-based and host-based detection methods to enhance cybersecurity in smart grid environments. By utilizing a dual-layer integration approach, the system effectively monitors network traffic and host-level activities, addressing the vulnerabilities inherent in the interconnected EVCS ecosystem. Experimental results show that the hybrid IDS achieves exceptional detection accuracy, with the network component reaching 99.99% accuracy for network-based attacks, significantly outperforming traditional single-source detection methods.
A hybrid IDS for EV charging infrastructure achieves up to 99.99% accuracy in detecting network-based attacks, setting a new standard for cybersecurity in smart grids.
The integration of Electric Vehicle Charging Stations (EVCSs) into the smart grid necessitates sophisticated digital infrastructure for their management and coordination, which expands the attack surface and makes both the power grid and EVCSs vulnerable to cyberattacks. This research addresses critical gaps in existing EVCS Intrusion Detection Systems (IDS) by proposing a hybrid IDS that integrates attack detection on both the cyber and physical layer of the EVCS ecosystem. The proposed hybrid IDS utilizes a dual-layer integration method, which combines network-based IDS (NIDS) and host-based IDS (HIDS). This approach facilitates for comprehensive monitoring of both network traffic through the NIDS and host-level activities via the HIDS, effectively addressing the unique challenges posed by the interconnected nature of EVCS ecosystems. Utilizing the recent CICEVSE2024 dataset, the IDS presented in this work performs multiclass classification across various attack types, including False Data Injection Attacks (FDIAs), reconnaissance, denial of service, backdoor, and cryptojacking attacks. Experimental results demonstrate that our approach achieves excellent detection accuracy, with the NIDS component reaching 99.99\% accuracy for network-based attacks and the HIDS component achieving 83.47\% accuracy on FDIA, cryptojacking, backdoor, all DoS, all Recon except Slowloris Scan attacks. This dual-layer detection significantly outperforms single-source detection approaches previously presented in literature.
