University of Bristol
In this paper, the authors present a model-based Intrusion Detection System (IDS) for Home Area Networks (HANs) within the smart grid. Considering that ZigBee is the dominant technology in future HAN, the proposed IDS is designed to target ZigBee standard. Their focus is on the physical and Medium Access Control (MAC) layers of ZigBee technology, which are defined in IEEE 802.15.4 standard. In the proposed IDS, normal behavior of the network is modeled through specifications extracted from the IEEE 802.15.4 standard as well as features of wireless network traffic. Deviations from normal behavior can be a sign of malicious activities.