Smart Substation Communications and Cybersecurity: A Comprehensive Survey

Abstract

Electrical grids generate, transport, distribute and deliver electrical power to consumers through a complex Critical Infrastructure which progressively shifted from an air-gaped to a connected architecture. Specifically, Smart Substations are important parts of Smart Grids, providing switching, transforming, monitoring, metering and protection functions to offer a safe, efficient and reliable distribution of electrical power to consumers. The evolution of electrical power grids was closely followed by the digitization of all its parts and improvements in communication and computing infrastructures, leading to an evolution towards digital smart substations with improved connectivity. However, connected smart substations are exposed to cyber threats which can result in blackouts and faults which may propagate in a chain reaction and damage electrical appliances connected across the electrical grid. This work organizes and offers a comprehensive review of architectural, communications and cybersecurity standards for smart substations, complemented by a threat landscape analysis and the presentation of a Defense-in-Depth strategy blueprint. Furthermore, this work examines several defense mechanisms documented in the literature, existing datasets, testbeds and evaluation methodologies, identifying the most relevant open issues which may guide and inspire future research work.

Investigations in Security Challenges and Solutions for M2M Communications—A Review

“…Keeping data integrity is crucial for restricting and stopping unauthorized alterations. Unauthorized alterations may involve deliberate or accidental alteration, erasure, delay, or repetition of words [120].…”

Railway Infrastructure Cybersecurity: An Overview

“…Additionally, there might be constraints -for instance, in IEC 61850 scenarios a mandatory response time of less than 4ms advises against the use of network encryption (Gaspar et al 2023). As a result, a comprehensive risk assessment is required, to adapt the security measures to the operational requirements or to choose the tools and technologies whose performance better suit the specific scenario needs (Rosa et al, 2015).…”