Light-weight and Robust Network Intrusion Detection for Cyber-attacks in Digital Substations

Elrawy, Mohamed Faisal; Hadjidemetriou, Lenos; Laoudias, Christos; Michael, Maria K.

doi:10.1109/isgtasia49270.2021.9715626

Cited by 12 publications

(19 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, this study also examines the impact of PV irradiance within normal operation on the voltage and current of a PV system, which exhibit variations throughout the day. Table 1 presents a detailed summary of recent studies that enhance smart grid resilience for cyber threats with DER systems [16][17][18][19][20][21][22][23][24]. In general, the studies [19][20][21] focused on studying the impact of cyber attacks on power protection systems, while [5,15] investigated the impact of cyber threats on microgrid control systems.…”

Section: Literature Reviewmentioning

confidence: 99%

Smart Grid Resilience for Grid-Connected PV and Protection Systems under Cyber Threats

Alasali,

Itradat,

Abu Ghalyon

et al. 2023

Smart Cities

View full text Add to dashboard Cite

In recent years, the integration of Distributed Energy Resources (DERs) and communication networks has presented significant challenges to power system control and protection, primarily as a result of the emergence of smart grids and cyber threats. As the use of grid-connected solar Photovoltaic (PV) systems continues to increase with the use of intelligent PV inverters, the susceptibility of these systems to cyber attacks and their potential impact on grid stability emerges as a critical concern based on the inverter control models. This study explores the cyber-threat consequences of selectively targeting the components of PV systems, with a special focus on the inverter and Overcurrent Protection Relay (OCR). This research also evaluates the interconnectedness between these two components under different cyber-attack scenarios. A three-phase radial Electromagnetic Transients Program (EMTP) is employed for grid modeling and transient analysis under different cyber attacks. The findings of our analysis highlight the complex relationship between vulnerabilities in inverters and relays, emphasizing the consequential consequences of affecting one of the components on the other. In addition, this work aims to evaluate the impact of cyber attacks on the overall performance and stability of grid-connected PV systems. For example, in the attack on the PV inverters, the OCR failed to identify and eliminate the fault during a pulse signal attack with a short duration of 0.1 s. This resulted in considerable harmonic distortion and substantial power losses as a result of the protection system’s failure to recognize and respond to the irregular attack signal. Our study provides significant contributions to the understanding of cybersecurity in grid-connected solar PV systems. It highlights the importance of implementing improved protective measures and resilience techniques in response to the changing energy environment towards smart grids.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Smart Grid Resilience for Grid-Connected PV and Protection Systems under Cyber Threats

Alasali,

Itradat,

Abu Ghalyon

et al. 2023

Smart Cities

View full text Add to dashboard Cite

show abstract

“…The communication operations of the IEDs in substations are based on the GOOSE protocol to provide high-speed communication for exchanging critical information. For example, the essential events of power system protection applications, i.e., inter-trip and blocking, require strict time delivery of maximum 3 ms [12]. Therefore, the structure of the GOOSE message is designed to be directly connected with the data link layer using the CSMA/CD (Carrier Sense Multiple Access with Collision Detection) protocol.…”

Section: B Goose Communication Protocolmentioning

confidence: 99%

“…Moreover, by using the ethernet switch technology, the GOOSE protocol can implement the CSMA/CD in multicast and full duplex modes for transmitting and receiving messages to be suitable for real-time and mission-critical tasks, i.e., protection applications. Once the transmitter IED detects a new event, it can send the GOOSE message to multiple receivers at the same time [12], [13].…”

Section: B Goose Communication Protocolmentioning

confidence: 99%

“…The retransmission mechanisms of GOOSE protocol are based on Status number (ST) and Sequence number (SQ), where an increment of ST represents a new event and an increment of SQ represents a repetition of the same GOOSE message. For more details on these retransmission mechanisms, readers may refer to [12].…”

Section: B Goose Communication Protocolmentioning

confidence: 99%

“…Although the GOOSE protocol is designed to provide a fast and reliable communication channel for the IEDs, exploiting the security vulnerabilities of this protocol can threaten the physical operations of these IEDs and of the power system. Moreover, applying cybersecurity measures for securing the GOOSE protocol faces several challenges [12]. For instance, applying any encryption mechanism to this protocol is challenging due to the required strict time of 3 ms for GOOSE message delivery.…”

Section: Security Vulnerabilities and Threat Modelmentioning

confidence: 99%

See 2 more Smart Citations

Protection and Communication Model of Intelligent Electronic Devices to Investigate Security Threats

Elrawy

Tekki

Hadjidemetriou

et al. 2023

2023 IEEE Power &Amp; Energy Society Innovative Smart Grid Technologies Conference (ISGT)

Self Cite

View full text Add to dashboard Cite

Intelligent Electronic Devices (IEDs), e.g., protective relays, have a vital role for protecting power systems and substations. In modern power systems, the performance of protection schemes by IEDs can be affected by cyber-physical, communication and cybersecurity operations and thus, a holistic modeling approach is required where all the domains are properly considered. However, commercial protective relays used in the field are mainly modeled using closed-source software. Therefore, this work proposes an integrated, realistic, and flexible model of an overcurrent protective relay compatible with IEC 61850 communication standard. This open-source model integrates the behavioural interactions between the protective relays and their physical, communication and cybersecurity operations in a digital substation. A model of transmission substation is developed in MATLAB/Simulink ® for validation purposes and the effect of communication operations and cybersecurity threats on the relay's physical operations is investigated according to different case studies and attack scenarios.

show abstract

Smart grid cyberattack types classification: A fine tree bagging-based ensemble learning approach with feature selection

Ijeh,

Morsi

2024

Sustainable Energy, Grids and Networks

View full text Add to dashboard Cite

Light-weight and Robust Network Intrusion Detection for Cyber-attacks in Digital Substations

Cited by 12 publications

References 13 publications

Smart Grid Resilience for Grid-Connected PV and Protection Systems under Cyber Threats

Smart Grid Resilience for Grid-Connected PV and Protection Systems under Cyber Threats

Protection and Communication Model of Intelligent Electronic Devices to Investigate Security Threats

Smart grid cyberattack types classification: A fine tree bagging-based ensemble learning approach with feature selection

Contact Info

Product

Resources

About