3AS: Authentication, Authorization, and Accountability for SDN-Based Smart Grids

Abstract

Smart grid refers to the advancement of the current electric grid with the help of information and communication technologies. In such scenarios, an efficient and secure smart grid communication system is essential. Accordingly, Software-Defined Networks (SDN) have been gaining more prominence for smart grids in recent years, as this paradigm allows monitoring and managing these communication networks efficiently. An example is the Autonomic and Resilient Framework for Smart Grids (ARES). ARES allows integration between the supervisory system and the SDN controller, allowing for better energy applications. Although ARES emphasizes the need for security as a premise for its implementation, it does not provide a concrete implementation of this aspect. In this work, we provide an extensive review of the related literature about Authentication, Authorization, and Accountability (AAA) for smart grids, classifying approaches according to several relevant characteristics. We further propose 3AS, which extends the ARES framework with a security component based on the IEEE 802.1X standard. 3AS has been implemented on the Ryu SDN controller and evaluated on an emulated environment. Results indicate 3AS successfully provides authentication, authorization, and accountability with low control load and delay, thus being suitable for diverse smart grid scenarios.

Automated Cybersecurity Tester for IEC61850-Based Digital Substations

“…In order to meet the requirements of authentication, authorization, and accountability simultaneously, the SCADA system is integrated with a communication network controller based on the Autonomic and Resilient Framework for Smart Grids (ARES). In addition, the inclusion of an authorization (based on the IEEE 802.1X standard) of the ARES architecture is being investigated to mitigate the vulnerabilities in smart grid communications [14].…”