scholarly journals Denial-of-Service Attack on IEC 61850-Based Substation Automation System: A Crucial Cyber Threat towards Smart Substation Pathways

Sensors ◽  
2021 ◽  
Vol 21 (19) ◽  
pp. 6415
Author(s):  
Suleman Ashraf ◽  
Mohammad H. Shawon ◽  
Haris M. Khalid ◽  
S. M. Muyeen

The generation of the mix-based expansion of modern power grids has urged the utilization of digital infrastructures. The introduction of Substation Automation Systems (SAS), advanced networks and communication technologies have drastically increased the complexity of the power system, which could prone the entire power network to hackers. The exploitation of the cyber security vulnerabilities by an attacker may result in devastating consequences and can leave millions of people in severe power outage. To resolve this issue, this paper presents a network model developed in OPNET that has been subjected to various Denial of Service (DoS) attacks to demonstrate cyber security aspect of an international electrotechnical commission (IEC) 61850 based digital substations. The attack scenarios have exhibited significant increases in the system delay and the prevention of messages, i.e., Generic Object-Oriented Substation Events (GOOSE) and Sampled Measured Values (SMV), from being transmitted within an acceptable time frame. In addition to that, it may cause malfunction of the devices such as unresponsiveness of Intelligent Electronic Devices (IEDs), which could eventually lead to catastrophic scenarios, especially under different fault conditions. The simulation results of this work focus on the DoS attack made on SAS. A detailed set of rigorous case studies have been conducted to demonstrate the effects of these attacks.

Author(s):  
Vonani Clive Mathebula ◽  
Akshay Kumar Saha

The use of Substation Communication Networks (SCN) in power distribution centres of thermal power plants for protection, control and monitoring is increasing as industry’s confidence grows in the application of the IEC-61850 based Substation Automation Systems (SAS). IEC-61508, which is the standard for functional safety, addresses Electrical/Electronic/Programmable Electronic (E/E/PE) safety based technologies in so far as safety lifecycle as well as reliability and verification of safety related systems are concerned. It follows therefore, that Substation Communication Networks (SCN), as well as associated substation equipment that forms part of the overall safety system should satisfy the requirements of functional safety standard IEC-61508. In this paper, Substation Automation System standard (SAS) IEC-61850, Substation Communication Networks (SCNs) as well as dependability evaluation methods are reviewed and discussed.


Electronics ◽  
2021 ◽  
Vol 10 (3) ◽  
pp. 310
Author(s):  
Shantanu Kumar ◽  
Ahmed Abu-Siada ◽  
Narottam Das ◽  
Syed Islam

With the global trend to digitalize substation automation systems, International Electro technical Commission 61850, a communication protocol defined by the International Electrotechnical Commission, has been given much attention to ensure consistent communication and integration of substation high-voltage primary plant assets such as instrument transformers, circuit breakers and power transformers with various intelligent electronic devices into a hierarchical level. Along with this transition, equipment of primary plants in the switchyard, such as non-conventional instrument transformers, and a secondary system including merging units are expected to play critical roles due to their fast-transient response over a wide bandwidth. While a non-conventional instrument transformer has advantages when compared with the conventional one, extensive and detailed performance investigation and feasibility studies are still required for its full implementation at a large scale within utilities, industries, smart grids and digital substations. This paper is taking one step forward with respect to this aim by employing an optimized network engineering tool to evaluate the performance of an Ethernet-based network and to validate the overall process bus design requirement of a high-voltage non-conventional instrument transformer. Furthermore, the impact of communication delay on the substation automation system during peak traffic is investigated through a detailed simulation analysis.


Author(s):  
Mohd. Asim Aftab ◽  
S.M. Suhail Hussain ◽  
Ikbal Ali ◽  
Taha Selim Ustun

Energies ◽  
2020 ◽  
Vol 13 (19) ◽  
pp. 5176
Author(s):  
Ghada Elbez ◽  
Hubert B. Keller ◽  
Atul Bohara ◽  
Klara Nahrstedt ◽  
Veit Hagenmeyer

Integration of Information and Communication Technology (ICT) in modern smart grids (SGs) offers many advantages including the use of renewables and an effective way to protect, control and monitor the energy transmission and distribution. To reach an optimal operation of future energy systems, availability, integrity and confidentiality of data should be guaranteed. Research on the cyber-physical security of electrical substations based on IEC 61850 is still at an early stage. In the present work, we first model the network traffic data in electrical substations, then, we present a statistical Anomaly Detection (AD) method to detect Denial of Service (DoS) attacks against the Generic Object Oriented Substation Event (GOOSE) network communication. According to interpretations on the self-similarity and the Long-Range Dependency (LRD) of the data, an Auto-Regressive Fractionally Integrated Moving Average (ARFIMA) model was shown to describe well the GOOSE communication in the substation process network. Based on this ARFIMA-model and in view of cyber-physical security, an effective model-based AD method is developed and analyzed. Two variants of the statistical AD considering statistical hypothesis testing based on the Generalized Likelihood Ratio Test (GLRT) and the cumulative sum (CUSUM) are presented to detect flooding attacks that might affect the availability of the data. Our work presents a novel AD method, with two different variants, tailored to the specific features of the GOOSE traffic in IEC 61850 substations. The statistical AD is capable of detecting anomalies at unknown change times under the realistic assumption of unknown model parameters. The performance of both variants of the AD method is validated and assessed using data collected from a simulation case study. We perform several Monte-Carlo simulations under different noise variances. The detection delay is provided for each detector and it represents the number of discrete time samples after which an anomaly is detected. In fact, our statistical AD method with both variants (CUSUM and GLRT) has around half the false positive rate and a smaller detection delay when compared with two of the closest works found in the literature. Our AD approach based on the GLRT detector has the smallest false positive rate among all considered approaches. Whereas, our AD approach based on the CUSUM test has the lowest false negative rate thus the best detection rate. Depending on the requirements as well as the costs of false alarms or missed anomalies, both variants of our statistical detection method can be used and are further analyzed using composite detection metrics.


2011 ◽  
Vol 130-134 ◽  
pp. 2805-2808
Author(s):  
Shao Ping Yin

In order to reap the benefits promised by the Smart Grid, communications between the IEDs in IEC 61850 Substation Automation System (SAS) will need to be made much more secure.Traditional security solutions based on Public Key Infrastructure (PKI) are calculation intensive and introduces latency that will be difficult to meet substation environmental and electrical requirements, so they are not well suited for IEC 61850 SAS. Identity based encryption (IBE) schemes, introduced by Shamir in 1984 [5] are based on the idea to use participant’s unique identities as public key and public key directories are unnecessary. Thus, utilizing IBE in IEC 61850 SAS is a reasonable choice. This paper briefly introduces the features of IEC 61850 SAS communication security and IBE and then propose an IBE-based Self Private Key Generated (SPKG) encryption scheme to establish encryption system in IEC 61850 SAS. Advantages of this SPKG Scheme are also discussed in the paper.


Sign in / Sign up

Export Citation Format

Share Document