Exploiting the GOOSE protocol: A practical attack on cyber-infrastructure

2012 IEEE Globecom Workshops, GC Wkshps 2012

Volumn , Issue , 2012, Pages 1508-1513

  Hoyos, Juan ^a   Dehus, Mark ^a   Brown, Timthy X ^a  

^a UNIVERSITY OF COLORADO   (United States)

Author keywords

critical infrastructure; cybersecurity; GOOSE messages; IEC 61850; substation security

Indexed keywords

CYBER INFRASTRUCTURES; CYBER SECURITY; GENERIC OBJECT ORIENTED SUB-STATION EVENTS; GOOSE MESSAGES; IEC 61850; SECURITY ISSUES; SUBSTATION NETWORKS; SUBSTATION SECURITY;

CRITICAL INFRASTRUCTURES; ELECTRIC SUBSTATIONS; STANDARDS;

COMPUTER CRIME;

EID: 84875657451     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOMW.2012.6477809     Document Type: Conference Paper

References (19)

1. R. E. Mackiewicz, "Overview of 61850 benefits,", Transmission and Distribution Conference and Exhibition, 2005/2006 IEEE PES. 21-24 May 2006, pp. 376-383, doi: 10.1109/TDC.2006.1668522 (Pubitemid 46894348)
2. G. Scheer and D. Dolezilek, "Comparing the reliability of Ethernet network topologies in substation control and monitoring networks,". Technical Applications Document. SEL, Pullman, WA, April 2000, [Online]. Available: http://www2.selinc.com/techpprs/6103.pdfhttp://www2.selinc.com/ techpprs/6103.pdf
3. Department of Homeland Security. "Information analysis and infrastructure protection,". Critical Infrastructure Information Act of 2002, [Online]. Available: http://www.dhs.gov/xlibrary/assets/CII-Act.pdf
4. IEC, Communication networks and systems in substation - Specific communication service mapping. IEC 61850.8, 2008.
5. Department of Homeland Security, National infrastructure protection plan, partnering to enhance protection and resilience. May 2 2009, [Online]. Available: http://www.dhs.gov/xlibrary/assets/NIPP-Plan.pdf
6. NERC, NERC Implementation plan for cyber security standards CIP-002-1 through CIP-009-1, 2006. Available: http://www.nerc.com/fileUploads/File/ Standards/Revised-Implementation-Plan-CIP-002-0
7. M. Goraj, L. Lipes, and J. McGhee, "IEC 61850 over Wimax for fast isolation and restoration of faults in distribution networks,", PacWorld Conference, 2011. Available: http://es.scribd.com/doc/78041627/74994185-Iec- 61850-Goose-Over-Wimax-Pac-World-2011
8. M. Adamiak and G. Brunello. "Implementation and operational experience of a wide area special protection scheme on the SRP system,", Power Systems Conference: Advanced Metering, Protection, Control, Communication, and Distributed Resources, 2006, pp. 145-158, doi:10.1109/PSAMp.2006.285384
9. IEC, Power systems management and associated information exchange, data and communication security. IEC standard 62351, 2007.
10. H. Falk, "Securing IEC 61850,", Power and Energy Society General Meeting - Conversion and Delivery of Electrical Energy in the 21st Century, July 2008, pp. 1-3, 20-24, doi: 10.1109/PES.2008.4596335F
11. Alvarez, K. Hansen, and K. McGrath. "The Protection of Substation Communications,". Proc. of S4 2010: SCADA Security Scientific Symposium, January 2010, Miami, USA Available: http://www.cl.cam.ac.uk/~sf392/publications/ S4-2010.pdf
12. IEC, Communication networks and systems in substation, Specific communication service mapping. IEC standard 61850.5. 2008.
13. th Army Science Conference 29 November - 2 December 2005, Orlando, Florida http://www.dtic.mil/dtic/tr/fulltext/u2/ a432010.pdf
14. Elaine Barker and Allen Roginsky, Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths. NIST Special Publication 800-131A http://csrc.nist.gov/publications/nistpubs/800-131A/sp800- 131A.pdf
15. S. Fries and M. Seewald. "Method of group key generation and management for generic object oriented substation event model,". International Patent WO2011/141040A1, November 17, 2011.
16. R. McMillan, "Siemens: Stuxnet worm hit industrial systems,". Computerworld, September 14 2010 [Online]. Available: http://www.computerworld. com/s/article/print/9185419/Siemens-Stuxnet-worm-hit-industrial-systems
17. L. Senecal, "Understanding, preventing, and defending against layer 2 attacks," Cisco Expo 2009. [Online]. Available: http://www.cisco.com/web/ ME/exposaudi2009/assets/docs/layer2-attacks-and-mitigation-t.pdf
18. ITU, Information technolog ASN.1 encoding rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER). ITU Standard X.609, 2002 [Online]. Available: http://www.itu.int/ ITU-T/studygroups/com17/languages/X.690-0207.pdf
19. Yunsuf. CCIE profesional development series network security technologies and solutions, Cisco press, March 20 2008, pp. 221, ISBN 1-58705-246-6.