Cybersecurity ofSCADAwithin Substations

Abstract

The cybersecurity of modern substations is becoming increasingly important as they continue to integrate more digital control and communication technologies. This chapter will explore the cybersecurity threats to substations and will then discuss various mechanisms to protect them. The chapter will demonstrate how the security protections, such as encryption, authentication, access control, and intrusion detection, should be applied to substation systems. The chapter will then discuss the emerging cybersecurity requirements for both product vendors and utilities.

Quantifying Decision Making in the Critical Infrastructure via the Analytic Hierarchy Process (AHP)

“…ThecurrentglobalsecuritylandscapethathascausedGeneralDempsey(andmostofus)somuchangst hasasmuchtodowiththeidentificationofthreatagentsasitdoeswithhandlingthesophistication and complexity of current and future threats (Shaw, 2006). The cyberspace domain as we have notedprovidesanumberofdifferentchallengesforusamongstthembeingtheabilitytodetermine quicklythepotentialsourceofthethreatstodecideanappropriatecourseofaction(COA).Among thehighestoftheprioritiesistheneedtoreducethecybervulnerabilities.Theconflictswagedover historyinthefourconventionalwarfaredomains(air,space,sea,land)havebeenverydifferentin thedeterminationofwherethethreatsmayoriginate.Inthecyberspacedomain,however,because thepotentialsourcesofthethreatsaresoverydifficulttoimmediatelydetermine,averyspecialand differentsetofchallengesmustbeovercome.TheNationalInstituteofStandardsandTechnology (NIST),aswellasothergovernmentagencies,havedonealotofworkinclassifyingandcategorizing cyberthreats.Itisverymuchanissuethatgoesbeyondsimplydeliberateattacksthatcanbeattributed toindividuals,groups,governments,etc.,includingnaturaldisasters,e.g.,earthquakes,tornados, hurricanes,storms,pandemics.Inaddition,therecanbedisastersthatcanoccurdotounintended consequencesofhumanbehavior,e.g.,someonehitsthewrongswitchordoesnotturnofftheright switchandcausesamajorproblem.…”

Modelagem e Detecção de Ataques Grayhole ao Protocolo GOOSE usando o Framework ERENO

“…Em contraste com os sistemas de informac ¸ões tradicionais, onde as propriedades de Confidencialidade e Integridade são consideradas prioritárias, nos sistemas industriais de infraestrutura crítica a Disponibilidade é fundamental [Hahn et al 2016]. Nesse contexto, uma das principais ameac ¸as consistem nos ataques de negac ¸ão de servic ¸o, do inglês Denial of Service (DoS).…”