Modeling Cyber-Physical Vulnerability of the Smart Grid With Incomplete Information

Srivastava, Anurag K.; Morris, Thomas H.; Ernster, Timothy A.; Vellaithurai, Ceeman; Pan, Shengyi; Adhikari, Uttam

doi:10.1109/tsg.2012.2232318

Cited by 145 publications

(88 citation statements)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Modeling attacks on real systems has great significance [55]. Peter J. Hawrylak, et al, provide a novel method to model cyber-physical attacks in smart grid with hybrid attack graphs [52].…”

Section: Attack Modelingmentioning

confidence: 99%

Towards a Framework for Assuring Cyber Physical System Security

Lu¹,

Zhao²,

Zhao³

et al. 2015

IJSIA

View full text Add to dashboard Cite

show abstract

Section: Attack Modelingmentioning

confidence: 99%

Towards a Framework for Assuring Cyber Physical System Security

Lu¹,

Zhao²,

Zhao³

et al. 2015

IJSIA

View full text Add to dashboard Cite

show abstract

“…For example, based on the knowledge of the power system topologies, an intruder may attack the bad data detection algorithms of the current state estimators [44]. Another topology based cyber attack is proposed in [45], where attack on the electric circuit breaker will cause the isolation of the generation units from the power grid. In [46], it has been shown that a cyber attack on confidentiality with proper topological knowledge can lead to an integrity and availability attack.…”

Section: Protection From Topology-wise Cyber Attacksmentioning

confidence: 99%

Attack Severity–Based Honeynet Management Framework

2014

The State of the Art in Intrusion Prevention and Detection

View full text Add to dashboard Cite

Abstract:Smart grid security is crucial to maintain stable and reliable power system operation during the contingency situation due to the failure of any critical power system component. Ensuring a 'secured smart grid' involves with a less possibility of power grid collapse or equipment malfunction. Due to lack of the proper 'security measures', a major blackout may occur which can even lead to a cascading failure. Therefore, to protect this critical power system infrastructure and to ensure a reliable and an uninterrupted power supply to the end users, smart grid security issues must be addressed with high priority.In a smart grid environment, electric power infrastructure is modernized by incorporating the current and future requirements and advanced functionalities to its consumers. To make the smart grid happen, cyber system is integrated with the physical power system. Although adoption of cyber system has made the grid more energy efficient and modernized, it has introduced cyber-attack issues which are critical for national infrastructure security and customer satisfaction. Due to the cyberattack, power grid may face operational failures and loss of synchronization. This operational failure may damage critical power system components which may interrupt the power supply and make the system unstable resulting high financial penalties. In this chapter, some recent cyber attack related incidents into a smart grid environment are discussed. The requirements and the state of the art of cyber security issues of a critical power system infrastructure are illustrated elaborately.

show abstract

“…[6,21,25,33,35,37], with execution typically achieved on unauthenticated and unencrypted protocols, widely considered to be an easy task. While engagement with readily available MITM tools [34] can quickly achieve some results, targeted manipulation would require broader contextual knowledge.…”

Section: Introductionmentioning

confidence: 99%

On the Significance of Process Comprehension for Conducting Targeted ICS Attacks

Green

Krotofil

Abbasi

2017

Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy

View full text Add to dashboard Cite

The exploitation of Industrial Control Systems (ICSs) has been described as both easy and impossible, where is the truth? PostStuxnet works have included a plethora of ICS focused cyber security research activities, with topics covering device maturity, network protocols, and overall cyber security culture. We often hear the notion of ICSs being highly vulnerable due to a lack of inbuilt security mechanisms, considered a low hanging fruit to a variety of low skilled threat actors. While there is substantial evidence to support such a notion, when considering targeted attacks on ICS, it is hard to believe an attacker with limited resources, such as a script kiddie or hacktivist, using publicly accessible tools and exploits alone, would have adequate knowledge and resources to achieve targeted operational process manipulation, while simultaneously evade detection. Through use of a testbed environment, this paper provides two practical examples based on a Man-In-The-Middle scenario, demonstrating the types of information an attacker would need obtain, collate, and comprehend, in order to begin targeted process manipulation and detection avoidance. This allows for a clearer view of associated challenges, and illustrate why targeted ICS exploitation might not be possible for every malicious actor.

show abstract

Modeling Cyber-Physical Vulnerability of the Smart Grid With Incomplete Information

Cited by 145 publications

References 28 publications

Towards a Framework for Assuring Cyber Physical System Security

Towards a Framework for Assuring Cyber Physical System Security

Attack Severity–Based Honeynet Management Framework

On the Significance of Process Comprehension for Conducting Targeted ICS Attacks

Contact Info

Product

Resources

About