Automated Cybersecurity Tester for IEC61850-Based Digital Substations
Power substations are the crucial nodes of an interconnected grid, serving as the points where power is transferred from the transmission/distribution grids to the loads. However, interconnected cyberphysical systems and communication-based operations at substations lead to many cybersecurity vulner...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-10-01
|
| Series: | Energies |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1996-1073/15/21/7833 |
| _version_ | 1797468415599837184 |
|---|---|
| author | Junho Hong Tai-Jin Song Hyojong Lee Aydin Zaboli |
| author_facet | Junho Hong Tai-Jin Song Hyojong Lee Aydin Zaboli |
| author_sort | Junho Hong |
| collection | DOAJ |
| description | Power substations are the crucial nodes of an interconnected grid, serving as the points where power is transferred from the transmission/distribution grids to the loads. However, interconnected cyberphysical systems and communication-based operations at substations lead to many cybersecurity vulnerabilities. Therefore, more sophisticated cybersecurity vulnerability analyses and threat modeling are required during productization phases, and system hardening is mandatory for the commercialization of products. This paper shows the design and methods to test the cybersecurity of multicast messages for digital substations. The proposed vulnerability assessment methods are based on the semantics of IEC61850 Generic Object Oriented Substation Event (GOOSE) and Sampled Value (SV), and cybersecurity features from IEC62351-6. Different case scenarios for cyberattacks are considered to check the vulnerabilities of the device under test (DUT) based on the IEC62351-6 standard. In order to discover security vulnerabilities in a digital substation, the proposed cybersecurity tester will generate malicious packets that compromise the regular functionality. The results show that the proposed cybersecurity testing module is able to detect potential vulnerabilities in multicast messages and the authentication methods (e.g., message authentication code) of multicast communications. Both commercial and simulated devices are used for the case studies. |
| first_indexed | 2024-03-09T19:07:08Z |
| format | Article |
| id | doaj.art-1f24797e90e3483ba47705cee12744a6 |
| institution | Directory Open Access Journal |
| issn | 1996-1073 |
| language | English |
| last_indexed | 2024-03-09T19:07:08Z |
| publishDate | 2022-10-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Energies |
| spelling | doaj.art-1f24797e90e3483ba47705cee12744a62023-11-24T04:27:23ZengMDPI AGEnergies1996-10732022-10-011521783310.3390/en15217833Automated Cybersecurity Tester for IEC61850-Based Digital SubstationsJunho Hong0Tai-Jin Song1Hyojong Lee2Aydin Zaboli3Department of Electrical and Computer Engineering, University of Michigan-Dearborn, Dearborn, MI 48128, USADepartment of Urban Engineering, Chungbuk National University, Cheongju 28644, KoreaHitachi Energy, Raleigh, NC 27606, USADepartment of Electrical and Computer Engineering, University of Michigan-Dearborn, Dearborn, MI 48128, USAPower substations are the crucial nodes of an interconnected grid, serving as the points where power is transferred from the transmission/distribution grids to the loads. However, interconnected cyberphysical systems and communication-based operations at substations lead to many cybersecurity vulnerabilities. Therefore, more sophisticated cybersecurity vulnerability analyses and threat modeling are required during productization phases, and system hardening is mandatory for the commercialization of products. This paper shows the design and methods to test the cybersecurity of multicast messages for digital substations. The proposed vulnerability assessment methods are based on the semantics of IEC61850 Generic Object Oriented Substation Event (GOOSE) and Sampled Value (SV), and cybersecurity features from IEC62351-6. Different case scenarios for cyberattacks are considered to check the vulnerabilities of the device under test (DUT) based on the IEC62351-6 standard. In order to discover security vulnerabilities in a digital substation, the proposed cybersecurity tester will generate malicious packets that compromise the regular functionality. The results show that the proposed cybersecurity testing module is able to detect potential vulnerabilities in multicast messages and the authentication methods (e.g., message authentication code) of multicast communications. Both commercial and simulated devices are used for the case studies.https://www.mdpi.com/1996-1073/15/21/7833cybersecuritydigital substationsvulnerability assessment toolcyber defensecybersecurity of intelligent electronic device (IED) |
| spellingShingle | Junho Hong Tai-Jin Song Hyojong Lee Aydin Zaboli Automated Cybersecurity Tester for IEC61850-Based Digital Substations Energies cybersecurity digital substations vulnerability assessment tool cyber defense cybersecurity of intelligent electronic device (IED) |
| title | Automated Cybersecurity Tester for IEC61850-Based Digital Substations |
| title_full | Automated Cybersecurity Tester for IEC61850-Based Digital Substations |
| title_fullStr | Automated Cybersecurity Tester for IEC61850-Based Digital Substations |
| title_full_unstemmed | Automated Cybersecurity Tester for IEC61850-Based Digital Substations |
| title_short | Automated Cybersecurity Tester for IEC61850-Based Digital Substations |
| title_sort | automated cybersecurity tester for iec61850 based digital substations |
| topic | cybersecurity digital substations vulnerability assessment tool cyber defense cybersecurity of intelligent electronic device (IED) |
| url | https://www.mdpi.com/1996-1073/15/21/7833 |
| work_keys_str_mv | AT junhohong automatedcybersecuritytesterforiec61850baseddigitalsubstations AT taijinsong automatedcybersecuritytesterforiec61850baseddigitalsubstations AT hyojonglee automatedcybersecuritytesterforiec61850baseddigitalsubstations AT aydinzaboli automatedcybersecuritytesterforiec61850baseddigitalsubstations |