Smart grid communication network traffic anomaly detection based on entropy analysis

Smart grid information network faced with great threats for the amount kinds of devices running in this network and part of them is able to be open accessed from the Internet. In this paper, we apply the entropy-based anomaly detection approach to detect the anomaly behavior in the smart grid communication network. This approach is based on the entropy on the four features: source (destination) IP address (ports). We also experiment this method on the Hadoop Streaming. The result shows that by using this method anomaly can be detected from the devices' log analysis.