An integrated testbed for locally monitoring SCADA systems in smart grids

Abstract

A testbed for evaluating if and how process-aware monitoring may increase the security of decentralized SCADA networks in power grids is presented. The testbed builds on the co-simulation framework Mosaik, and co-simulates in an integrated way, the power distribution network on different voltage levels, as well as the control network (Modbus/TCP). The existing simulators were extended to allow topology changes, and a controller (RTU) simulator connected to a SCADA server enabling remote control was implemented. Using the developed testbed, a recently proposed local monitoring approach was investigated. The results show that for so-called interlocks the proposed monitoring approach prevents the execution of 33.3% of the commands, that would result in an unsafe state of the power distribution grid. Furthermore, it is shown that unsafe transformer tap positions can also be avoided. To illustrate the relevance and importance of the proposed testbed, a detailed comparison of related work on process-aware intrusion detection approaches and testbeds combining (parts of) the control network and the power grid is provided.

Securing SCADA networks for smart grids via a distributed evaluation of local sensor data

“…This section extends the theoretical model of the IDS, presented in [18], [19]. We consider a division of the distribution grid in so-called subgrids, which form connected and to some extend self-contained units within the electrical grid.…”

“…For this, we first repeat their definition (c.f. [18]). Power lines connect different components of the grid, i.e.…”

“…Each power line has a maximum current L i .I max and a reference voltage L i .V ref , which indicate the maximum current that can be endured without damage, and the allowed voltage boundaries. The component descriptions follow [18], [19], extended by the origin property, and include further dynamic properties like the state of a switch (open or closed) and static properties like attachment of switches to power lines.…”

CPES Testing with mosaik: Co-Simulation Planning, Execution and Analysis

“…The MOSAIK co-simulation framework has already been applied by different institutions in a variety of CPES test cases [39][40][41], demonstrating features like interoperability with real-time laboratories [21], the possibility of simulator exchange [20], or distributed coordination of heterogeneous simulation components [42].…”

An Open Framework for Deploying Experimental SCADA Testbed Networks

“…Mallouhi used the network simulator OPNET 2 , which restricts the level of fidelity and the testbeds's ability to interact with physical devices and networks. Chromik et al (2017) used the Mosaik 3 smartgrid simulator to simulate the power distribution network and the control network, running Modbus-TCP. They proposed a decentralised process-aware monitoring system using the Bro IDS.…”