Detection of DoS Attacks Using ARFIMA Modeling of GOOSE Communication in IEC 61850 Substations

Integration of Information and Communication Technology (ICT) in modern smart grids (SGs) offers many advantages including the use of renewables and an effective way to protect, control and monitor the energy transmission and distribution. To reach an optimal operation of future energy systems, availability, integrity and confidentiality of data should be guaranteed. Research on the cyber-physical security of electrical substations based on IEC 61850 is still at an early stage. In the present work, we first model the network traffic data in electrical substations, then, we present a statistical Anomaly Detection (AD) method to detect Denial of Service (DoS) attacks against the Generic Object Oriented Substation Event (GOOSE) network communication. According to interpretations on the self-similarity and the Long-Range Dependency (LRD) of the data, an Auto-Regressive Fractionally Integrated Moving Average (ARFIMA) model was shown to describe well the GOOSE communication in the substation process network. Based on this ARFIMA-model and in view of cyber-physical security, an effective model-based AD method is developed and analyzed. Two variants of the statistical AD considering statistical hypothesis testing based on the Generalized Likelihood Ratio Test (GLRT) and the cumulative sum (CUSUM) are presented to detect flooding attacks that might affect the availability of the data. Our work presents a novel AD method, with two different variants, tailored to the specific features of the GOOSE traffic in IEC 61850 substations. The statistical AD is capable of detecting anomalies at unknown change times under the realistic assumption of unknown model parameters. The performance of both variants of the AD method is validated and assessed using data collected from a simulation case study. We perform several Monte-Carlo simulations under different noise variances. The detection delay is provided for each detector and it represents the number of discrete time samples after which an anomaly is detected. In fact, our statistical AD method with both variants (CUSUM and GLRT) has around half the false positive rate and a smaller detection delay when compared with two of the closest works found in the literature. Our AD approach based on the GLRT detector has the smallest false positive rate among all considered approaches. Whereas, our AD approach based on the CUSUM test has the lowest false negative rate thus the best detection rate. Depending on the requirements as well as the costs of false alarms or missed anomalies, both variants of our statistical detection method can be used and are further analyzed using composite detection metrics

Alcohol control: Mobile sensor system and numerical signal analysis

An innovative mobile sensor system for alcohol control in the respiratory air is introduced. The gas sensor included in the sensor system is thermo-cyclically operated. Ethanol is the leading component in this context. However, other components occur in the breathing air which can influence the concentration determination of ethanol. Therefore, mono- ethanol samples and binary gas mixtures are measured by the sensor system and analyzed with a new calibration and evaluation procedure which is also incorporated in the system. The applications demonstrate a good substance identification capability of the sensor system and a very good concentration determination of the components

Analysis of Oscillating Combustion for NOx-Reduction in Pulverized Fuel Boilers

Thermal power plants in different fields are regularly adapted to the state-of-the-art emissions standards, applying “The Best Available Techniques Reference”. Since 2016 in the power plant area new, more stringent limits for power plant units with a thermal output of more than 300 MW operated with black coal are valid. Usually, in order to reach the new limits e.g., for NOX emissions, downstream reduction processes (Selective Non-Catalytic Reduction, SNCR or Selective Catalytic eduction) are applied, which use of operating resources (essentially ammonia water) thereby increase. By the means of an xperimentally validated process, by which pulverized fuel is fed by oscillation through a swirl burner into a pilot ombustion chamber with a thermal output of 2.5 MW, nitrogen oxides can be reduced without further activities, for nstance from 450 mg/mN3 in non-oscillation operation mode (0 Hz) to 280 mg/mN3 in oscillation operation mode (3.5 Hz), normalized to an O2–content of 6% each. These findings were patented in EP3084300. Particularly promising are the experiments which utilize oscillation of a large portion of the burn out air instead of the fuel in order to minimize the fatigue of the pulverized fuel oscillator, amongst others. Thereby, the nitrogen conversion rate, which describes the ratio of NOX to fuel nitrogen, including thermal NOX can be reduced from 26% for non-oscillation operation mode down to 6%. The present findings show that fuel oscillation alone is not sufficient to achieve nitrogen oxides concentrations below the legislative values. Therefore, a combination of different primary (and secondary) measures is required. This paper presents the experimental results for oscillating coal-dust firing. Furthermore, an expert model based on a multivariate regression is developed to evaluate the experimental results

Trends and Regional Differences in Breastfeeding in Germany From 1871 To 1937

This article describes trends and regional differences in breastfeeding within Germany from 1870 to 1937. Sharp regional differences in both the in cidence and duration of breastfeeding are present around 1910. There is a com plex pattern of trends in infant-feeding practices. Breastfeeding declined in urban areas between the late nineteenth century and the first World War. A strong nationwide resurgence in the incidence of breastfeeding occurred between the two world wars, accompanied by a decline in the average duration of breastfeeding. By 1937, the formerly great regional differences in breastfeeding had nearly dis appeared. The article also discusses social, economic, cultural, and historical variables affecting infant-feeding practices, including local breastfeeding customs, a national infant welfare campaign, and allowances to nursing mothers.Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/67272/2/10.1177_036319908501000203.pd

Variability-Selected Quasars in MACHO Project Magellanic Cloud Fields

We present 47 spectroscopically-confirmed quasars discovered behind the Magellanic Clouds identified via photometric variability in the MACHO database. Thirty-eight quasars lie behind the Large Magellanic Cloud and nine behind the Small Magellanic Cloud, more than tripling the number of quasars previously known in this region. The quasars cover the redshift interval 0.2 < z < 2.8 and apparent mean magnitudes 16.6 < V < 20.1. We discuss the details of quasar candidate selection based on time variability in the MACHO database and present results of spectroscopic follow-up observations. Our follow-up detection efficiency was 20%; the primary contaminants were emission-line Be stars in Magellanic Clouds. For the 47 quasars discovered behind the Magellanic Clouds plus an additional 12 objects previously identified in this region, we present 7.5-year MACHO V- and R-band lightcurves with average sampling times of 2-10 days.Comment: 26 pages, 9 figures. High resolution figures and data available from http://www.ucolick.org/~mgeha/MACHO Accepted for publication in the Astronomical Journa

The prognosis for pain, disability, activities of daily living and quality of life after an acute osteoporotic vertebral body fracture: its relation to fracture level, type of fracture and grade of fracture deformation

The level of the acute osteoporotic vertebral fracture, fracture type and grade of fracture deformation were determined in 107 consecutive patients and related to pain, disability, activities of daily living (ADL) and quality of life (QoL) after 3 weeks, 3, 6 and 12 months. Two-thirds of the fractured patients were women and with a similar average age, around 75 years, as the men. Fifty-eight of the acute fractures were located in the thoracic spine and 49 in the lumbar spine and predominantly at the Th12 and L1 levels. Sixty-nine percent of the fractures were wedge, 19% concave and 12% crush fractures. There were 22 mildly, 50 moderately and 35 severely deformed vertebrae. The grade of fracture deformation was not related to gender, age or fracture location. Severely deformed vertebrae predominantly (92%) occurred among the crush fracture type. One year after the fracture, irrespective of fracture level, fracture type or grade of fracture deformation, 4/5 still had pronounced pain and deteriorated QoL. Initial severe fracture deformation by far was the worst prognostic factor for severe lasting pain and disability, and deterioration of ADL and QoL. Factors like fracture level, lumbar fractures tended to improve steadily while thoracic deteriorated, type of fracture, the wedge and concave resulting in less pain and better QoL than the crush fracture type and gender influenced to a lesser extent the outcomes during the year after the acute fracture

Stress System Dynamics during “Life As It Is Lived”: An Integrative Single-Case Study on a Healthy Woman

Little is known about the dynamic characteristics of stress system activity during “life as it is lived”. Using as representative a study design as possible, this investigation sought to gain insights into this area. A healthy 25-year-old woman collected her entire urine over a period of 63 days in 12-h intervals (126 measurements) to determine cortisol and neopterin (immune activation marker) levels. In addition, she filled out questionnaires on emotional state and daily routine in 12-h intervals, and was interviewed weekly to identify emotionally negative and positive everyday incidents. Adjusted cross-correlational analyses revealed that stressful incidents were associated with cyclic response patterns in both urinary cortisol and urinary neopterin concentrations. Urinary cortisol levels first decreased 12–24 h after stressful incidents occurred (lag 1: −.178; p = 0.048) and then increased a total of 72–84 h later (lag 6: +.224; p = 0.013). Urinary neopterin levels first increased 0–12 h before the occurrence of stressful incidents (−lag 1: +.185; p = 0.040) and then decreased a total of 48–60 h following such stressors (lag 4: −.181; p = 0.044). Decreases in urinary neopterin levels were also found 24–36 and 48–60 h after increases in pensiveness (lag 2: −.215; p = 0.017) and depressiveness (lag 4: −.221; p = 0.014), respectively. Findings on emotionally positive incidents sharply contrasted with those dealing with negative experiences. Positive incidents were followed first by urinary cortisol concentration increases within 12 h (lag 0: +.290; p = 0.001) and then by decreases after a total of 60–72 h (lag 5: −.186; p = 0.039). Urinary neopterin levels first decreased 12–24 h before positive incidents occurred (−lag 2: −.233; p = 0.010) and then increased a total of 12–24 h following these incidents (lag 1: +.222; p = 0.014). As with previous investigations on patients with systemic lupus erythematosus (SLE), this study showed that stress system response can be considerably longer and more complex and differentiated than findings from conventional group studies have suggested. Further integrative single-case studies will need to be conducted in order to draw firm conclusions about stress system dynamics under real-life conditions