Implementação de Ataques em Ambiente Simulado para Estudo de Segurança Cibernética em Sistemas Elétricos

• Johnatan A. de Oliveira IME
• Anderson F. Pereira dos Santos IME
• Ronaldo M. Salles IME

DOI: https://doi.org/10.5753/sbseg.2023.233109

Abstract

The insertion of digital communications in electrical power systems made these critical infrastructures susceptible to cyber attacks. Network protocols of these systems, defined by the IEC 61850 standard, have known vulnerabilities and ways to mitigate them are currently studied. Therefore, this article presents a laboratory simulation of an electrical system modeled in Real-Time Digital Simulator (RTDS) using a real IED in hardware-in-the-loop with the implementation of cyber attacks . The experiments carried out will serve as a basis for the study of intrusion detection in these environments.

References

Hong, J., Liu, C.-C., and Govindarasu, M. (2014). Detection of cyber intrusions using network-based multicast messages for substation automation. In ISGT 2014, pages 1–5.

Hoyos, J., Dehus, M., and Brown, T. X. (2012). Exploiting the goose protocol: A practical attack on cyber-infrastructure. In 2012 IEEE Globecom Workshops, pages 1508–1513.

IEC61850 (2011). Communication networks and systems for power utility automation– Part 8-1: Specific communication service mapping (SCSM)–Mappings to MMS (ISO 9506-1 and ISO 9506-2) and to ISO/IEC 8802-3. International Electrotechnical Commission: Geneva, Switzerland.

Jahromi, A. A., Kemmeugne, A., Kundur, D., and Haddadi, A. (2020). Cyber-physical attacks targeting communication-assisted protection schemes. IEEE Transactions on Power Systems, 35(1):440–450.

Kush, N., Ahmed, E., Branagan, M., and Foo, E. (2014). Poisoned goose: Exploiting the goose protocol. In Proceedings of the Twelfth Australasian Information Security Conference Volume 149, AISC ’14, page 17–22.

M. Lee, R., J. Assante, M., and Conway, T. (2016). Analysis of the cyber attack on the ukrainian power grid. Electricity Information Sharing and Analysis Center (E-ISAC), 388:1–29.

Quincozes, S., Albuquerque, C., Passos, D., and Mossé, D. (2022). Ereno: An extensible tool for generating realistic iec-61850 intrusion detection datasets. In Anais Estendidos do XXII Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais, pages 1–8, Porto Alegre, RS, Brasil. SBC.

Quincozes, S. E., Albuquerque, C., Passos, D., and Mossé, D. (2021). A survey on intrusion detection and prevention systems in digital substations. Computer Networks, 184:107679.

Rajkumar, V. S., Tealane, M., Ştefanov, A., and Palensky, P. (2020). Cyber attacks on protective relays in digital substations and impact analysis. In 2020 8th Workshop on Modeling and Simulation of Cyber-Physical Energy Systems, pages 1–6.

Ustun, T. S., Farooq, S. M., and Hussain, S. M. S. (2019). A novel approach for mitigation of replay and masquerade attacks in smartgrids using iec 61850 standard. IEEE Access, 7:156044–156053.