Attacking IEC 61850 Substations by Targeting the PTP Protocol

Digital substations, also referred to as modern power grid substations, utilize the IEC 61850 station and process bus in conjunction with IP-based communication. This includes communication with switch yard equipment within the substation as well as the dispatch center. IEC 61850 is a global standar...

Full description

Bibliographic Details
Main Authors: Aida Akbarzadeh, Laszlo Erdodi, Siv Hilde Houmb, Tore Geir Soltvedt, Hans Kristian Muggerud
Format: Article
Language:English
Published: MDPI AG 2023-06-01
Series:Electronics
Subjects:
Online Access:https://www.mdpi.com/2079-9292/12/12/2596
_version_ 1797595145402580992
author Aida Akbarzadeh
Laszlo Erdodi
Siv Hilde Houmb
Tore Geir Soltvedt
Hans Kristian Muggerud
author_facet Aida Akbarzadeh
Laszlo Erdodi
Siv Hilde Houmb
Tore Geir Soltvedt
Hans Kristian Muggerud
author_sort Aida Akbarzadeh
collection DOAJ
description Digital substations, also referred to as modern power grid substations, utilize the IEC 61850 station and process bus in conjunction with IP-based communication. This includes communication with switch yard equipment within the substation as well as the dispatch center. IEC 61850 is a global standard developed to standardize power grid communications, covering multiple communication needs related to modern power grid substations or digital substations. Unlike the legacy communication standards, IEC 60870-5-104 and DNP3, IEC 61850 is specifically designed for IP-based communication. It comprises several communication models and supports real-time communication by introducing the process bus to replace traditional peer-to-peer communication with standard network communication between substation equipment and the switch yard. The process bus, especially Sampled Measured Values (SMV) communication, in modern power grid substations relies on extremely accurate and synchronized time to prevent equipment damage, maintain power grid system balance, and ensure safety. In IEC 61850, time synchronization is provided by the Precision Time Protocol (PTP). This paper discusses the significance and challenges of time synchronization in IEC 61850 substations, particularly those associated with PTP. It presents the results of a controlled experiment that subjects time synchronization and PTP to cyber-attacks and discusses the potential consequences of such attacks. The paper also provides recommendations for potential mitigation strategies. The contribution of this paper is to provide insights and recommendations for enhancing the security of IEC 61850-based substations against cyber-attacks targeting time synchronization. The paper also explores the potential consequences of cyber-attacks and provides recommendations for potential mitigation strategies.
first_indexed 2024-03-11T02:32:19Z
format Article
id doaj.art-0205bafc6d094a3d8e743bf7328c1048
institution Directory Open Access Journal
issn 2079-9292
language English
last_indexed 2024-03-11T02:32:19Z
publishDate 2023-06-01
publisher MDPI AG
record_format Article
series Electronics
spelling doaj.art-0205bafc6d094a3d8e743bf7328c10482023-11-18T10:07:59ZengMDPI AGElectronics2079-92922023-06-011212259610.3390/electronics12122596Attacking IEC 61850 Substations by Targeting the PTP ProtocolAida Akbarzadeh0Laszlo Erdodi1Siv Hilde Houmb2Tore Geir Soltvedt3Hans Kristian Muggerud4Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2802 Gjøvik, NorwayDepartment of Information Security and Communication Technology, Norwegian University of Science and Technology, 7491 Trondheim, NorwayDepartment of Information Security and Communication Technology, Norwegian University of Science and Technology, 2802 Gjøvik, NorwayStatnett SF, 0484 Oslo, NorwaySmart Infrastructure, Siemens AS, 0596 Oslo, NorwayDigital substations, also referred to as modern power grid substations, utilize the IEC 61850 station and process bus in conjunction with IP-based communication. This includes communication with switch yard equipment within the substation as well as the dispatch center. IEC 61850 is a global standard developed to standardize power grid communications, covering multiple communication needs related to modern power grid substations or digital substations. Unlike the legacy communication standards, IEC 60870-5-104 and DNP3, IEC 61850 is specifically designed for IP-based communication. It comprises several communication models and supports real-time communication by introducing the process bus to replace traditional peer-to-peer communication with standard network communication between substation equipment and the switch yard. The process bus, especially Sampled Measured Values (SMV) communication, in modern power grid substations relies on extremely accurate and synchronized time to prevent equipment damage, maintain power grid system balance, and ensure safety. In IEC 61850, time synchronization is provided by the Precision Time Protocol (PTP). This paper discusses the significance and challenges of time synchronization in IEC 61850 substations, particularly those associated with PTP. It presents the results of a controlled experiment that subjects time synchronization and PTP to cyber-attacks and discusses the potential consequences of such attacks. The paper also provides recommendations for potential mitigation strategies. The contribution of this paper is to provide insights and recommendations for enhancing the security of IEC 61850-based substations against cyber-attacks targeting time synchronization. The paper also explores the potential consequences of cyber-attacks and provides recommendations for potential mitigation strategies.https://www.mdpi.com/2079-9292/12/12/2596smart gridcyber securityIEC 61850process busdigital stationPrecision Time Protocol (PTP)
spellingShingle Aida Akbarzadeh
Laszlo Erdodi
Siv Hilde Houmb
Tore Geir Soltvedt
Hans Kristian Muggerud
Attacking IEC 61850 Substations by Targeting the PTP Protocol
Electronics
smart grid
cyber security
IEC 61850
process bus
digital station
Precision Time Protocol (PTP)
title Attacking IEC 61850 Substations by Targeting the PTP Protocol
title_full Attacking IEC 61850 Substations by Targeting the PTP Protocol
title_fullStr Attacking IEC 61850 Substations by Targeting the PTP Protocol
title_full_unstemmed Attacking IEC 61850 Substations by Targeting the PTP Protocol
title_short Attacking IEC 61850 Substations by Targeting the PTP Protocol
title_sort attacking iec 61850 substations by targeting the ptp protocol
topic smart grid
cyber security
IEC 61850
process bus
digital station
Precision Time Protocol (PTP)
url https://www.mdpi.com/2079-9292/12/12/2596
work_keys_str_mv AT aidaakbarzadeh attackingiec61850substationsbytargetingtheptpprotocol
AT laszloerdodi attackingiec61850substationsbytargetingtheptpprotocol
AT sivhildehoumb attackingiec61850substationsbytargetingtheptpprotocol
AT toregeirsoltvedt attackingiec61850substationsbytargetingtheptpprotocol
AT hanskristianmuggerud attackingiec61850substationsbytargetingtheptpprotocol