Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
This article provides a general overview of the communication protocols used in the IEC61850 standard for the automation of electrical substations. Specifically, it examines the GOOSE and R-GOOSE protocols, which are used for exchanging various types of information. The article then presents real ca...
Main Authors: | , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
MDPI AG
2024-03-01
|
Series: | Applied Sciences |
Subjects: | |
Online Access: | https://www.mdpi.com/2076-3417/14/7/2964 |
_version_ | 1797212846047625216 |
---|---|
author | Francisco Alonso Benjamín Samaniego Gonzalo Farias Sebastián Dormido-Canto |
author_facet | Francisco Alonso Benjamín Samaniego Gonzalo Farias Sebastián Dormido-Canto |
author_sort | Francisco Alonso |
collection | DOAJ |
description | This article provides a general overview of the communication protocols used in the IEC61850 standard for the automation of electrical substations. Specifically, it examines the GOOSE and R-GOOSE protocols, which are used for exchanging various types of information. The article then presents real cases of cyber attacks on the industrial sector, highlighting the importance of addressing cybersecurity in the IEC61850 standard. The text presents security drawbacks of the communication protocols mentioned earlier and briefly explains two algorithms defined in the IEC61850 standard to address them. However, the authors suggest that having only a couple of algorithms may not be sufficient to ensure digital security in substations. This article presents a study on the cryptographic algorithms ChaCha20 and Poly1305. The purpose of the study is to experimentally verify their adaptation to the strict time requirements that GOOSE must meet for their operation. These algorithms can operate independently or in combination, creating an Authenticated Encryption with Associated Data (AEAD) algorithm. Both algorithms were thoroughly reviewed and tested using GOOSE and R-GOOSE frames generated by the S-GoSV software. The computational time required was also observed. The frames were analysed using the Wireshark software. It was concluded that the algorithms are suitable for the communication requirements of electrical substations and can be used as an alternative to the cryptographic algorithms proposed under the IEC61850 standard. |
first_indexed | 2024-04-24T10:48:52Z |
format | Article |
id | doaj.art-59c0bcae307f4d84be0ca87599b1655e |
institution | Directory Open Access Journal |
issn | 2076-3417 |
language | English |
last_indexed | 2024-04-24T10:48:52Z |
publishDate | 2024-03-01 |
publisher | MDPI AG |
record_format | Article |
series | Applied Sciences |
spelling | doaj.art-59c0bcae307f4d84be0ca87599b1655e2024-04-12T13:15:19ZengMDPI AGApplied Sciences2076-34172024-03-01147296410.3390/app14072964Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical SectorFrancisco Alonso0Benjamín Samaniego1Gonzalo Farias2Sebastián Dormido-Canto3Departamento de Informática y Automática, Universidad Nacional de Educación a Distancia, 28040 Madrid, SpainEscuela de Ingeniería Eléctrica, Pontificia Universidad Católica de Valparaíso, Valparaíso 2362804, ChileEscuela de Ingeniería Eléctrica, Pontificia Universidad Católica de Valparaíso, Valparaíso 2362804, ChileDepartamento de Informática y Automática, Universidad Nacional de Educación a Distancia, 28040 Madrid, SpainThis article provides a general overview of the communication protocols used in the IEC61850 standard for the automation of electrical substations. Specifically, it examines the GOOSE and R-GOOSE protocols, which are used for exchanging various types of information. The article then presents real cases of cyber attacks on the industrial sector, highlighting the importance of addressing cybersecurity in the IEC61850 standard. The text presents security drawbacks of the communication protocols mentioned earlier and briefly explains two algorithms defined in the IEC61850 standard to address them. However, the authors suggest that having only a couple of algorithms may not be sufficient to ensure digital security in substations. This article presents a study on the cryptographic algorithms ChaCha20 and Poly1305. The purpose of the study is to experimentally verify their adaptation to the strict time requirements that GOOSE must meet for their operation. These algorithms can operate independently or in combination, creating an Authenticated Encryption with Associated Data (AEAD) algorithm. Both algorithms were thoroughly reviewed and tested using GOOSE and R-GOOSE frames generated by the S-GoSV software. The computational time required was also observed. The frames were analysed using the Wireshark software. It was concluded that the algorithms are suitable for the communication requirements of electrical substations and can be used as an alternative to the cryptographic algorithms proposed under the IEC61850 standard.https://www.mdpi.com/2076-3417/14/7/2964IEC61850IEC62351Generic Object-Oriented Substation Events (GOOSE)R-GOOSEChaCha20Poly1305 |
spellingShingle | Francisco Alonso Benjamín Samaniego Gonzalo Farias Sebastián Dormido-Canto Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector Applied Sciences IEC61850 IEC62351 Generic Object-Oriented Substation Events (GOOSE) R-GOOSE ChaCha20 Poly1305 |
title | Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector |
title_full | Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector |
title_fullStr | Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector |
title_full_unstemmed | Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector |
title_short | Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector |
title_sort | analysis of cryptographic algorithms to improve cybersecurity in the industrial electrical sector |
topic | IEC61850 IEC62351 Generic Object-Oriented Substation Events (GOOSE) R-GOOSE ChaCha20 Poly1305 |
url | https://www.mdpi.com/2076-3417/14/7/2964 |
work_keys_str_mv | AT franciscoalonso analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector AT benjaminsamaniego analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector AT gonzalofarias analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector AT sebastiandormidocanto analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector |