Network-Attack-Resilient Intrusion-Tolerant SCADA for the Power Grid

Babay, Amy; Tantillo, Thomas; Aron, Trevor; Platania, Marco; Amir, Yair

doi:10.1109/dsn.2018.00036

Cited by 23 publications

(18 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Babay et al [147] developed a novel architecture called Spire, which distributes replicas of the SCADA control center across multiple locations in order to enhance the resilience against cyber attacks. In order to evaluate the efficiency of the proposed solution, the authors deployed Spire in a wide area consisting of two control centers and two data centers.…”

Section: Scada Survivability and Resiliencementioning

confidence: 99%

A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

Pliatsios

Sarigiannidis

Λάγκας

et al. 2020

IEEE Commun. Surv. Tutorials

191

View full text Add to dashboard Cite

Supervisory Control and Data Acquisition (SCADA) systems are the underlying monitoring and control components of critical infrastructures, such as power, telecommunication, transportation, pipelines, chemicals and manufacturing plants. Legacy SCADA systems operated on isolated networks, that made them less exposed to Internet threats. However, the increasing connection of SCADA systems to the Internet, as well as corporate networks, introduces severe security issues. Security considerations for SCADA systems are gaining higher attention, as the number of security incidents against these critical infrastructures is increasing. In this survey, we provide an overview of the general SCADA architecture, along with a detailed description of the SCADA communication protocols. Additionally, we discuss certain high-impact security incidents, objectives, and threats. Furthermore, we carry out an extensive review of the security proposals and tactics that aim to secure SCADA systems. We also discuss the state of SCADA system security. Finally, we present the current research trends and future advancements of SCADA security.

show abstract

Section: Scada Survivability and Resiliencementioning

confidence: 99%

A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

Pliatsios

Sarigiannidis

Λάγκας

et al. 2020

IEEE Commun. Surv. Tutorials

191

View full text Add to dashboard Cite

show abstract

“…Ref. [81] develops a survivable SCADA model based on intrusion-tolerant replication protocols. By using the model, the SCADA system can continue to operate and with minimal performance degradation even if malicious attacks compromise part of the system, which is essential for maintaining high availability in the face of cyber-attacks.…”

Section: Critical Infrastructure Protectionmentioning

confidence: 99%

A survey on policies, modelling and security of cyber‐physical systems in smart grids

Kang

Zhang

Wen

2021

Energy Conversion and Econom

View full text Add to dashboard Cite

A more reliable, efficient, and resilient smart grid depends on the applications of advanced information and communication technologies to support new functions and controls. The critical infrastructure of a smart grid consists of some major components such as monitoring, controls, communication protocol and software. The cyber-physical system (CPS), which integrates these components, is an important enabler for the expected transition of the energy system driven by decarbonization, digitalization and decentralization. This paper provides an overview of the policy drivers and barriers for the implementation of CPS in power systems. With the vast deployment of distributed energy resources (DERs), there is increasing demand to model the hardware, software and their interactions in the smart grid environment. This paper reviews the modelling and applications of intelligent CPS for decentralized energy systems. The integration of DERs and the supportive infrastructure make modern power systems more vulnerable and less reliable to external threats such as terrorist intrusion. There are growing concerns over the risk of cyber-attacks in mart grids. This paper surveys the latest progress on critical infrastructure identification and protection, as well as risk assessment and mitigation methods for cyber-attacks. Finally, some advanced issues in cyber-physical energy systems are addressed.

show abstract

“…When a timer expires, p i checks R HB [p i ] for the number of accumulated signatures on its corresponding heartbeat. If that number is ≤ 2f , p i enters the passive mode; otherwise it removes the corresponding entry from R HB [p i ] (lines [13][14][15][16][17][18][19].…”

Section: Detailed Presentation Of Pistismentioning

confidence: 99%

“…Sending and Receiving Echoes. When p i receives an Echo ( p j , sq, v , Σ), p i reacts differently depending on whether it is not already echoing for this instance (lines 8-15), already echoing v (lines [16][17][18][19][20], or already echoing a different value (lines 21-27). In all three cases, p i starts delivering a message (and stops sending echoes) as soon as at least 2f + 1 distinct signatures have been collected for that message.…”

Section: Detailed Presentation Of Pistismentioning

confidence: 99%

See 1 more Smart Citation

PISTIS: An Event-Triggered Real-Time Byzantine-Resilient Protocol Suite

Kozhaya

Decouchant

Rahli

et al. 2021

IEEE Trans. Parallel Distrib. Syst.

View full text Add to dashboard Cite

The accelerated digitalisation of society along with technological evolution have extended the geographical span of cyber-physical systems. Two main threats have made the reliable and real-time control of these systems challenging: (i) uncertainty in the communication infrastructure induced by scale, and heterogeneity of the environment and devices; and (ii) targeted attacks maliciously worsening the impact of the above-mentioned communication uncertainties, disrupting the correctness of realtime applications.This paper addresses those challenges by showing how to build distributed protocols that provide both real-time with practical performance, and scalability in the presence of network faults and attacks, in probabilistic synchronous environments. We provide a suite of real-time Byzantine protocols, which we prove correct, starting from a reliable broadcast protocol, called PISTIS, up to atomic broadcast and consensus. This suite simplifies the construction of powerful distributed and decentralized monitoring and control applications, including state-machine replication. Extensive empirical simulations showcase PISTIS's robustness, latency, and scalability. For example, PISTIS can withstand message loss (and delay) rates up to 50% in systems with 49 nodes and provides bounded delivery latencies in the order of a few milliseconds.

show abstract

Network-Attack-Resilient Intrusion-Tolerant SCADA for the Power Grid

Cited by 23 publications

References 29 publications

A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics

A survey on policies, modelling and security of cyber‐physical systems in smart grids

PISTIS: An Event-Triggered Real-Time Byzantine-Resilient Protocol Suite

Contact Info

Product

Resources

About