A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids

Abstract IEC 61850 is emerging as a popular communication standard for smart grids. Standardized communication in smart grids has an unwanted consequence of higher vulnerability to cyber-attacks. Attackers exploit the standardized semantics of the communication protocols to launch different types of...

Full description

Bibliographic Details
Main Authors: Shahbaz Hussain, Atif Iqbal, S. M. Suhail Hussain, Stefano Zanero, Abdullatif Shikfa, Enrico Ragaini, Irfan Khan, Rashid Alammari
Format: Article
Language:English
Published: Nature Portfolio 2023-02-01
Series:Scientific Reports
Online Access:https://doi.org/10.1038/s41598-022-27157-z
_version_ 1828041580182765568
author Shahbaz Hussain
Atif Iqbal
S. M. Suhail Hussain
Stefano Zanero
Abdullatif Shikfa
Enrico Ragaini
Irfan Khan
Rashid Alammari
author_facet Shahbaz Hussain
Atif Iqbal
S. M. Suhail Hussain
Stefano Zanero
Abdullatif Shikfa
Enrico Ragaini
Irfan Khan
Rashid Alammari
author_sort Shahbaz Hussain
collection DOAJ
description Abstract IEC 61850 is emerging as a popular communication standard for smart grids. Standardized communication in smart grids has an unwanted consequence of higher vulnerability to cyber-attacks. Attackers exploit the standardized semantics of the communication protocols to launch different types of attacks such as false data injection (FDI) attacks. Hence, there is a need to develop a cybersecurity testbed and novel mitigation strategies to study the impact of attacks and mitigate them. This paper presents a testbed and methodology to simulate FDI attacks on IEC 61850 standard compliant Generic Object-Oriented Substation Events (GOOSE) protocol using real time digital simulator (RTDS) together with open-source tools such as Snort and Wireshark. Furthermore, a novel hybrid cybersecurity solution by the name of sequence content resolver is proposed to counter such attacks on the GOOSE protocol in smart grids. Utilizing the developed testbed FDI attacks in the form of replay and masquerade attacks on are launched and the impact of attacks on electrical side is studied. Finally, the proposed hybrid cybersecurity solution is implemented with the developed testbed and its effectiveness is demonstrated.
first_indexed 2024-04-10T17:18:24Z
format Article
id doaj.art-7c82984ae3c94239b37e318f31e977ee
institution Directory Open Access Journal
issn 2045-2322
language English
last_indexed 2024-04-10T17:18:24Z
publishDate 2023-02-01
publisher Nature Portfolio
record_format Article
series Scientific Reports
spelling doaj.art-7c82984ae3c94239b37e318f31e977ee2023-02-05T12:13:53ZengNature PortfolioScientific Reports2045-23222023-02-0113111310.1038/s41598-022-27157-zA novel hybrid methodology to secure GOOSE messages against cyberattacks in smart gridsShahbaz Hussain0Atif Iqbal1S. M. Suhail Hussain2Stefano Zanero3Abdullatif Shikfa4Enrico Ragaini5Irfan Khan6Rashid Alammari7Department of Electrical Engineering, Qatar UniversityDepartment of Electrical Engineering, Qatar UniversityDepartment of Electrical Engineering, King Fahd University of Petroleum and Minerals (KFUPM)Dipartimento di Elettronica, Informazione e Bioingegneria, Politecnico di MilanoCollege of Computing and Information Technology, University of Doha for Science and TechnologyDipartimento di Elettronica, Informazione e Bioingegneria, Politecnico di MilanoDepartment of Electrical and Computer Engineering, Texas A&M UniversityDepartment of Electrical Engineering, Qatar UniversityAbstract IEC 61850 is emerging as a popular communication standard for smart grids. Standardized communication in smart grids has an unwanted consequence of higher vulnerability to cyber-attacks. Attackers exploit the standardized semantics of the communication protocols to launch different types of attacks such as false data injection (FDI) attacks. Hence, there is a need to develop a cybersecurity testbed and novel mitigation strategies to study the impact of attacks and mitigate them. This paper presents a testbed and methodology to simulate FDI attacks on IEC 61850 standard compliant Generic Object-Oriented Substation Events (GOOSE) protocol using real time digital simulator (RTDS) together with open-source tools such as Snort and Wireshark. Furthermore, a novel hybrid cybersecurity solution by the name of sequence content resolver is proposed to counter such attacks on the GOOSE protocol in smart grids. Utilizing the developed testbed FDI attacks in the form of replay and masquerade attacks on are launched and the impact of attacks on electrical side is studied. Finally, the proposed hybrid cybersecurity solution is implemented with the developed testbed and its effectiveness is demonstrated.https://doi.org/10.1038/s41598-022-27157-z
spellingShingle Shahbaz Hussain
Atif Iqbal
S. M. Suhail Hussain
Stefano Zanero
Abdullatif Shikfa
Enrico Ragaini
Irfan Khan
Rashid Alammari
A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids
Scientific Reports
title A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids
title_full A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids
title_fullStr A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids
title_full_unstemmed A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids
title_short A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids
title_sort novel hybrid methodology to secure goose messages against cyberattacks in smart grids
url https://doi.org/10.1038/s41598-022-27157-z
work_keys_str_mv AT shahbazhussain anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT atifiqbal anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT smsuhailhussain anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT stefanozanero anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT abdullatifshikfa anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT enricoragaini anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT irfankhan anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT rashidalammari anovelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT shahbazhussain novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT atifiqbal novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT smsuhailhussain novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT stefanozanero novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT abdullatifshikfa novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT enricoragaini novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT irfankhan novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids
AT rashidalammari novelhybridmethodologytosecuregoosemessagesagainstcyberattacksinsmartgrids