An Algorithm for Optimal Firewall Placement in IEC61850 Substations

Abstract

Recently, most electric power substations have adopted production control systems, such as SCADA systems, which communicate with field devices and remotely control processes from a computer screen. However, these systems together with protection measures and additional control actions (using protocol IEC61850) seem not to be enough to free substations of security attacks (e.g. virus, intruders, forgery or unauthorized data manipulation). This paper analyzes the main features of an electric power substation together with the aspects that might be significantly affected by cyber-attacks. The paper also presents the implementation of a specific security system (i.e. firewall-wise system) intended to protect a target distribution network.

An Overview of the Firewall Systems in the Smart Grid Paradigm

“…In [15] H. Eslava et al present a firewall system which aims at managing and controlling the data flows of a substation, which utilizes the IEC 61850 protocol. Firstly, the authors examined the main features of a substation and identified those that can be affected by a security threat.…”

A W-EAP Algorithm for IEC 61850 Protocol against DoS/Replay Attack

“…In the field of industrial firewall and intrusion detection, Guo Yawen proposed a whitelist-based access control strategy to set a whitelist to prevent SYN Flood attacks from fake IP addresses, restrict unauthorized devices from illegally accessing the control system, and enhanced the security of the control system [10]. Hermes Eslava analyzed the main features of an electric power substation and cyber-attacks, and then he introduced a firewall system, which can protect the target distribution network security system [11]. Junsik Kim proposed an FPGA-based network intrusion detection system.…”