A Trilevel Model for Segmentation of the Power Transmission Grid Cyber Network

Arguello, Bryan; Johnson, Emma S.; Gearhart, Jared Lee

doi:10.1109/jsyst.2022.3200665

Cited by 2 publications

(1 citation statement)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Prior work in [23] considers network segmentation for reducing load shedding through a tri-level optimization model [23] on optimal network segmentation through subnetting and creation of virtual local area networks (VLANs). In [23], network segmentation, through an interdiction Mixed Integer Nonlinear Problem (MINLP) is formulated and solved using bilevel branch and bound, where operations at three levels are optimized, i.e., an IT administrator is given an allowance for network segmentation, an adversary is given a fixed budget to attack the segmented network to inflict damage; in the third level, the grid operator is allowed to redispatch the grid after the attack to minimize load shedding. However, challenges arise in traditional optimization with incorporating cyber and physical system objectives and constraints in such a formulation which makes the solution challenging to obtain and difficult to scale.…”

Section: B Utility Firewall Optimization Related Workmentioning

confidence: 99%

Generation of Firewall Configurations for a Large Scale Synthetic Power System

Sahu

Wlazlo

Gaudet

et al. 2022

2022 IEEE Texas Power and Energy Conference (TPEC)

View full text Add to dashboard Cite

Electric power delivery relies on a communications backbone that must be secure. SCADA systems are essential to critical grid functions and include industrial control systems (ICS) protocols such as the Distributed Network Protocol-3 (DNP3). These protocols are vulnerable to cyber threats that power systems, as cyber-physical critical infrastructure, must be protected against. For this reason, the NERC Critical Infrastructure Protection standard CIP-005-5 specifies that an electronic system perimeter is needed, accomplished with firewalls. This paper presents how these electronic system perimeters can be optimally found and generated using a meta-heuristic approach for optimal security zone formation for large-scale power systems. Then, to implement the optimal firewall rules in a large scale power system model, this work presents a prototype software tool that takes the optimization results and auto-configures the firewall nodes for different utilities in a cyber-physical testbed. Using this tool, firewall policies are configured for all the utilities and their substations within a synthetic 2000-bus model, assuming two different network topologies. Results generate the optimal electronic security perimeters to protect a power system's data flows and compare the number of firewalls, monetary cost, and risk alerts from path analysis.

show abstract

Section: B Utility Firewall Optimization Related Workmentioning

confidence: 99%