Power system DNP3 data object security using data sets

Computers and Security

Volumn 29, Issue 4, 2010, Pages 487-500

  Mander, Todd ^a   Cheung, Richard ^a   Nabhani, Farhad ^b  

^a RYERSON UNIVERSITY   (Canada)

^b TEESSIDE UNIVERSITY   (United Kingdom)

Author keywords

Access control security; Attack tree; Demand side management Denial of service; Dispersed generation; DNP3; Firewall; Power system security SCADA; Smart grids

Indexed keywords

DEMAND SIDE MANAGEMENTS; DENIAL OF SERVICE; DISPERSED GENERATION; FIREWALL; POWER SYSTEM SECURITY; SMART GRID;

ACCESS CONTROL; COMPUTER VIRUSES; CRYPTOGRAPHY; ELECTRIC POWER SYSTEMS; NETWORK SECURITY; SECURITY SYSTEMS; TRANSMISSION CONTROL PROTOCOL;

NETWORK PROTOCOLS;

EID: 77951253371     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.10.001     Document Type: Article

References (30)

1. Cai N, Wang J, Wu X. SCADA system security: complexity, history, and new developments. 6th IEEE International Conference on Industrial Informatics, July 13-16 2008. pp. 569-74.
2. CIP-005. Cyber security - electronic security perimeters (June 2006), North American Electric Reliability Corporation (NERC)
3. Cleveland F. Enhancing the reliability and security of the information infrastructure used to manage the power system. IEEE Power Engineering Society (PES) General Meeting (Tampa, Florida); June 24-28, 2007.
4. Cleveland FM. Cyber security issues for advanced metering infrastructure (AMI). IEEE Power and Energy Society General Meeting; July 20-24, 2008.
5. DNP3 Specification. DNP3 object library part 1: basics vol. 6 (December 2007), DNP User's Group
6. DNP3 Specification. DNP3 object library part 3: parsing codes vol. 6 (December 2007), DNP User's Group
7. DNP3 Specification. IP networking vol. 7 (July 2007), DNP User's Group
8. DNP3 Specification. Application layer part 1: basics vol. 2 (December 2007), DNP User's Group
9. DNP3 Specification. Transport function vol. 3 (February 2007), DNP User's Group
10. DNP3 Specification. Data link layer vol. 4 (February 2007), DNP User's Group
11. DNP3 Specification. Application layer part 2: annex vol. 2 (December 2007), DNP User's Group
12. DNP3 Specification. Secure authentication (July 2008), DNP User's Group
13. DNP3 Specification. DNP3 object library part 2: objects vol. 6 (September 2008), DNP User's Group
14. Draft DNP application note AN2005-001: WITS usage overview. Water industry telemetry standards (WITS); July 2006.
15. Fan J., and Borlase S. The evolution of distribution. IEEE Power and Energy Magazine (March/April 2009) 63-68
16. Kropp T. System threats and vulnerabilities. IEEE Power and Energy Magazine (March/April 2006) 46-50
17. Mander T, Nabhani F, Wang L, Cheung R. Data object based security for DNP3 Over TCP/IP for increased utility commercial aspects security. IEEE Power Engineering Society (PES) General Meeting (Tampa, Florida); June 24-28, 2007.
18. Mander T, Nabhani F, Lee I. Role based access control infrastructure for consumer demand side management internet access. Flexible Automation and Intelligent Manufacturing (FAIM'09) Conference (Middlesbrough, U.K.); July 6-8, 2009.
19. Meter Data Management and Repository (MDM/R). Functional specification (November 2006), Independent Electricity System Operator (IESO)
20. Meter Data Management and Repository (MDM/R). Service and performance levels (December 2006), Independent Electricity System Operator (IESO)
21. NISCC good practice guide on firewall deployment for SCADA and process control networks (February 2005), National Infrastructure Security Co-ordination Centre (NISCC)
22. Nourai A., and Schafer C. Changing the electricity game. IEEE Power and Energy Magazine (July/August 2009) 42-47
23. Pollet, J. The past, present, and future of securing electric power systems. Proceedings of the 42nd Hawaii International Conference on System Sciences; 2009.
24. RFC 4301: security architecture for the Internet (December 2005), Internet Engineering Task Force (IETF)
25. RFC 5246: The transport layer security (TLS) protocol version 1.2 (August 2008), Internet Engineering Task Force (IETF)
26. Schainker R., Douglas J., and Kropp T. Electric utility responses to grid security issues. IEEE Power and Energy Magazine (March/April 2006) 30-37
27. SP800-82 final public draft: guide to industrial control systems (ICS) security (September 2008), National Institute of Standards and Technology (NIST)
28. Sweet W. How smart can you and your local electricity grid get. IEEE Spectrum [online] (June 2009)
29. Ten C, Liu C, Govindarasu M. Vulnerability assessment of cybersecurity for SCADA systems using attack trees. IEEE Power Engineering Society (PES) General Meeting (Tampa, Florida); June 24-28, 2007.
30. Vojdani A. "Smart integration". IEEE Power and Energy Magazine (November/December 2008) 71-79