ERENO-UI: A Tool for Generating Datasets for Intrusion Detection in IEC-61850 Networks

• Silvio E. Quincozes UFU http://orcid.org/0000-0001-6793-4033
• Vagner E. Quincozes UNIPAMPA https://orcid.org/0000-0002-6688-5572
• Célio Albuquerque UFF https://orcid.org/0000-0002-7959-6569
• Diego Passos UFF / ISEL https://orcid.org/0000-0002-9707-1176
• Daniel Mossé PITT https://orcid.org/0000-0002-9508-9815

DOI: https://doi.org/10.5753/sbseg_estendido.2022.226785

Abstract

The communication protocols proposed by the IEC-61850 standards expand connectivity in digital electrical substations. However, new vulnerabilities are also introduced. Thus, Intrusion Detection Systems (IDSs) become essential to protect substations. However, the use of IDSs in these scenarios is limited by the lack of attack signatures. In this work, the ERENO-UI is proposed: a component based on a friendly graphical interface that works in an integrated way with the ERENO dataset generator. Our results demonstrate that ERENO-UI allows proper configuration of ERENO to reproduce realistic messages from GOOSE and SV protocols, consistent with IEC-61850 standards.

Keywords: Graphic Interface, Smart Grid, Cybersecurity, Intrusion Detection, Datasets

References

Commission, I. E. (2003). Communication networks and systems in substations. IET.

Farley, J., Crawford, W., Malani, P., Norman, J. G., and Gehtland, J. (2006). Java Enterprise in a Nutshell. "O’Reilly Media, Inc.".

Gamma, E. (2009). Padrões de Projetos: Soluções Reutilizáveis. Bookman.

Hong, J. and Liu, C. (2019). Intelligent Electronic Devices With Collaborative Intrusion Detection Systems. IEEE Transactions on Smart Grid, 10(1):271–281.

Quincozes, S. E., Albuquerque, C., Passos, D., and Mossé, D. (2021). A Survey on Intrusion Detection and Prevention Systems in Digital Substations. Computer Networks, 184:107679.

Quincozes, S. E., Albuquerque, C. V. N., Passos, D., and Mossé, D. (2022). ERENO: An Extensible Tool for Generating Realistic IEC–61850 Intrusion Detection Datasets. Tese de doutorado, Universidade Federal Fluminense, Niterói. Disponível em https://www.facom.ufu.br/~sequincozes/assets/tese.pdf.