Synchrophasors-based Master State Awareness Estimator for Cybersecurity in Distribution Grid: Testbed Implementation &amp; Field Demonstration

Mataz, Alanzi,; Challa, Hari; Beleed, Hussain; Johnson, Brian K.; Chakhchoukh, Yacine; Ward, Reen, Dylan; Singh, Vivek Kumar; Bell, John; Rieger, Craig; Gentle, Jake P.

doi:10.1109/isgt50606.2022.9913073

Cited by 1 publication

(1 citation statement)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Work in this area includes gathering metrics based on characterizing the physical consequence resulting from a physical attack [4], [23], [24], which is critical for OT applications, but also cyber consequences that provide a more generalized understanding of the impact to the communications system [25], [26]. However, an integrated approach is important to providing the actionable perspective for both the cyber defender and power system operator [27] for OT environments.…”

Section: Introductionmentioning

confidence: 99%

Cybersecurity Resilience Demonstration for Wind Energy Sites in Co-Simulation Environment

McCarty

Johnson

Richardson³

et al. 2023

IEEE Access

Self Cite

View full text Add to dashboard Cite

Sandia National Laboratories and Idaho National Laboratory deployed state-of-the-art cybersecurity technologies within a virtualized, cyber-physical wind energy site to demonstrate their impact on security and resilience. This work was designed to better quantify cost-benefit tradeoffs and risk reductions when layering different security technologies on wind energy industrial control system, operational technology networks. Standardized step-by-step attack scenarios were drafted for adversaries with remote and local access to the wind network. Then, the team investigated the impact of encryption, access control, intrusion detection, security information and event management, and security, orchestration, automation, and response (SOAR) tools on multiple metrics, including physical impacts to the power system and termination of the adversary kill chain. We found, once programmed, the intrusion detection systems could detect attacks and the SOAR system was able to effectively and autonomously quarantine the adversary, prior to impacting the power system. Cyber and physical metrics indicated good network and endpoint visibility were essential to demonstrate the resilience of the system. In particular, certain hardening technologies, like encryption, reduced access to the adversaries, but recognition and response were able to ensure there was no impact to the operation of the wind site generators.INDEX TERMS wind turbine generation, cybersecurity, cyber-resilience, co-simulation, cyber-physical systems However, the control systems necessary to integrate renewable energy systems expand the attack surface by exposing

show abstract