Towards a Scalable and Flexible Smart Grid Co-Simulation Environment to Investigate Communication Infrastructures for Resilient Distribution Grid Operation

Velde, Dennis van der; Sen, Ömer; Hacker, Immanuel

doi:10.1109/sest50973.2021.9543387

Cited by 6 publications

(2 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The primary facilities are connected to the OT network through Intelligent Electronic Devices (IEDs) used for control and measurement tasks, aggregated within Figure 1 Illustration of the SG infrastructure based on the Purdue reference model, representing a future-oriented SCADA system that is connected to the primary equipment via dedicated and/or public communication infrastructure [17]. The right side represents the graph-based formalism of the infrastructure as a SB [4].…”

Section: Scada-based Process Networkmentioning

confidence: 99%

On specification-based cyber-attack detection in smart grids

et al. 2022

Self Cite

View full text Add to dashboard Cite

The transformation of power grids into intelligent cyber-physical systems brings numerous benefits, but also significantly increases the surface for cyber-attacks, demanding appropriate countermeasures. However, the development, validation, and testing of data-driven countermeasures against cyber-attacks, such as machine learning-based detection approaches, lack important data from real-world cyber incidents. Unlike attack data from real-world cyber incidents, infrastructure knowledge and standards are accessible through expert and domain knowledge. Our proposed approach uses domain knowledge to define the behavior of a smart grid under non-attack conditions and detect attack patterns and anomalies. Using a graph-based specification formalism, we combine cross-domain knowledge that enables the generation of whitelisting rules not only for statically defined protocol fields but also for communication flows and technical operation boundaries. Finally, we evaluate our specification-based intrusion detection system against various attack scenarios and assess detection quality and performance. In particular, we investigate a data manipulation attack in a future-orientated use case of an IEC 60870-based SCADA system that controls distributed energy resources in the distribution grid. Our approach can detect severe data manipulation attacks with high accuracy in a timely and reliable manner.

show abstract

Section: Scada-based Process Networkmentioning

confidence: 99%

On specification-based cyber-attack detection in smart grids

et al. 2022

Self Cite

View full text Add to dashboard Cite

show abstract

“…For the time-dependent control of our laboratory, we implemented a HITL simulation environment. This environment is implemented as co-simulation environment [17]. It allows time-discrete simulation steps.…”

Section: Hitl Simulationmentioning

confidence: 99%

Investigating the Cybersecurity of Smart Grids Based on Cyber-Physical Twin Approach

Sen

Carere

Santori

et al. 2022

2022 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)

Self Cite

View full text Add to dashboard Cite

While the increasing penetration of information and communication technology into distribution grid brings numerous benefits, it also opens up a new threat landscape, particularly through cyberattacks. To provide a basis for countermeasures against such threats, this paper addresses the investigation of the impact and manifestations of cyberattacks on smart grids by replicating the power grid in a secure, isolated, and controlled laboratory environment as a cyber-physical twin. Currently, detecting intrusions by unauthorized third parties into the central monitoring and control system of grid operators, especially attacks within the grid perimeter, is a major challenge. The development and validation of methods to detect and prevent coordinated and timed attacks on electric power systems depends not only on the availability and quality of data from such attack scenarios, but also on suitable realistic investigation environments. However, to create a comprehensive investigation environment, a realistic representation of the study object is required to thoroughly investigate critical cyberattacks on grid operations and evaluate their impact on the power grid using real data. In this paper, we demonstrate our cyber-physical twin approach using a microgrid in the context of a cyberattack case study.

show abstract