Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector

This article provides a general overview of the communication protocols used in the IEC61850 standard for the automation of electrical substations. Specifically, it examines the GOOSE and R-GOOSE protocols, which are used for exchanging various types of information. The article then presents real ca...

Full description

Bibliographic Details
Main Authors: Francisco Alonso, Benjamín Samaniego, Gonzalo Farias, Sebastián Dormido-Canto
Format: Article
Language:English
Published: MDPI AG 2024-03-01
Series:Applied Sciences
Subjects:
Online Access:https://www.mdpi.com/2076-3417/14/7/2964
_version_ 1797212846047625216
author Francisco Alonso
Benjamín Samaniego
Gonzalo Farias
Sebastián Dormido-Canto
author_facet Francisco Alonso
Benjamín Samaniego
Gonzalo Farias
Sebastián Dormido-Canto
author_sort Francisco Alonso
collection DOAJ
description This article provides a general overview of the communication protocols used in the IEC61850 standard for the automation of electrical substations. Specifically, it examines the GOOSE and R-GOOSE protocols, which are used for exchanging various types of information. The article then presents real cases of cyber attacks on the industrial sector, highlighting the importance of addressing cybersecurity in the IEC61850 standard. The text presents security drawbacks of the communication protocols mentioned earlier and briefly explains two algorithms defined in the IEC61850 standard to address them. However, the authors suggest that having only a couple of algorithms may not be sufficient to ensure digital security in substations. This article presents a study on the cryptographic algorithms ChaCha20 and Poly1305. The purpose of the study is to experimentally verify their adaptation to the strict time requirements that GOOSE must meet for their operation. These algorithms can operate independently or in combination, creating an Authenticated Encryption with Associated Data (AEAD) algorithm. Both algorithms were thoroughly reviewed and tested using GOOSE and R-GOOSE frames generated by the S-GoSV software. The computational time required was also observed. The frames were analysed using the Wireshark software. It was concluded that the algorithms are suitable for the communication requirements of electrical substations and can be used as an alternative to the cryptographic algorithms proposed under the IEC61850 standard.
first_indexed 2024-04-24T10:48:52Z
format Article
id doaj.art-59c0bcae307f4d84be0ca87599b1655e
institution Directory Open Access Journal
issn 2076-3417
language English
last_indexed 2024-04-24T10:48:52Z
publishDate 2024-03-01
publisher MDPI AG
record_format Article
series Applied Sciences
spelling doaj.art-59c0bcae307f4d84be0ca87599b1655e2024-04-12T13:15:19ZengMDPI AGApplied Sciences2076-34172024-03-01147296410.3390/app14072964Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical SectorFrancisco Alonso0Benjamín Samaniego1Gonzalo Farias2Sebastián Dormido-Canto3Departamento de Informática y Automática, Universidad Nacional de Educación a Distancia, 28040 Madrid, SpainEscuela de Ingeniería Eléctrica, Pontificia Universidad Católica de Valparaíso, Valparaíso 2362804, ChileEscuela de Ingeniería Eléctrica, Pontificia Universidad Católica de Valparaíso, Valparaíso 2362804, ChileDepartamento de Informática y Automática, Universidad Nacional de Educación a Distancia, 28040 Madrid, SpainThis article provides a general overview of the communication protocols used in the IEC61850 standard for the automation of electrical substations. Specifically, it examines the GOOSE and R-GOOSE protocols, which are used for exchanging various types of information. The article then presents real cases of cyber attacks on the industrial sector, highlighting the importance of addressing cybersecurity in the IEC61850 standard. The text presents security drawbacks of the communication protocols mentioned earlier and briefly explains two algorithms defined in the IEC61850 standard to address them. However, the authors suggest that having only a couple of algorithms may not be sufficient to ensure digital security in substations. This article presents a study on the cryptographic algorithms ChaCha20 and Poly1305. The purpose of the study is to experimentally verify their adaptation to the strict time requirements that GOOSE must meet for their operation. These algorithms can operate independently or in combination, creating an Authenticated Encryption with Associated Data (AEAD) algorithm. Both algorithms were thoroughly reviewed and tested using GOOSE and R-GOOSE frames generated by the S-GoSV software. The computational time required was also observed. The frames were analysed using the Wireshark software. It was concluded that the algorithms are suitable for the communication requirements of electrical substations and can be used as an alternative to the cryptographic algorithms proposed under the IEC61850 standard.https://www.mdpi.com/2076-3417/14/7/2964IEC61850IEC62351Generic Object-Oriented Substation Events (GOOSE)R-GOOSEChaCha20Poly1305
spellingShingle Francisco Alonso
Benjamín Samaniego
Gonzalo Farias
Sebastián Dormido-Canto
Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
Applied Sciences
IEC61850
IEC62351
Generic Object-Oriented Substation Events (GOOSE)
R-GOOSE
ChaCha20
Poly1305
title Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
title_full Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
title_fullStr Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
title_full_unstemmed Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
title_short Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
title_sort analysis of cryptographic algorithms to improve cybersecurity in the industrial electrical sector
topic IEC61850
IEC62351
Generic Object-Oriented Substation Events (GOOSE)
R-GOOSE
ChaCha20
Poly1305
url https://www.mdpi.com/2076-3417/14/7/2964
work_keys_str_mv AT franciscoalonso analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector
AT benjaminsamaniego analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector
AT gonzalofarias analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector
AT sebastiandormidocanto analysisofcryptographicalgorithmstoimprovecybersecurityintheindustrialelectricalsector