Policy enforcement system for secure interoperable control in distributed Smart Grid systems

Journal of Network and Computer Applications

Volumn 59, Issue , 2016, Pages 301-314

  Alcaraz, Cristina ^a,b   Lopez, Javier ^a   Wolthusen, Stephen ^b,c  

^a UNIVERSITY OF MÁLAGA   (Spain)

^b UNIVERSITY OF LONDON   (United Kingdom)

^c NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

Author keywords

Access control; Controllability; Distributed control systems; Interoperability; Policy enforcement; Smart Grid

Indexed keywords

ACCESS CONTROL; CLOSED LOOP CONTROL SYSTEMS; COMPUTER ARCHITECTURE; CONTROLLABILITY; DISTRIBUTED PARAMETER CONTROL SYSTEMS; ELECTRIC POWER TRANSMISSION NETWORKS; EXPERT SYSTEMS; GRAPH THEORY; NETWORK ARCHITECTURE; SMART POWER GRIDS;

GEOGRAPHICAL LOCATIONS; POLICY ENFORCEMENT; POLICY ENFORCEMENT SYSTEMS; ROLE-BASED ACCESS CONTROL MODEL; RULE BASED EXPERT SYSTEMS; SMART GRID; STRUCTURAL CONTROLLABILITY; THEORETICAL FORMULATION;

INTEROPERABILITY;

EID: 84949625873     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2015.05.023     Document Type: Article

References (52)

1. R. Albert, and A. Barabási Statistical mechanics of complex networks Rev Mod Phys 74 1 2002 47 97
2. C. Alcaraz, and J. Lopez Analysis of requirements for critical control systems Int J Crit Infrastruct Prot 2 3-4 2012 137 145
3. Alcaraz C, Wolthusen S. Recovery of structural controllability for control systems. In: The eighth IFIP WG 11.10 international conference on critical infrastructure protection, Lecture notes in computer science, vol. 441. Heidelberg: Springer; 2014. p. 47-63.
4. C. Alcaraz, and S. Zeadally Critical control system protection in the 21st century: threats and solutions IEEE Comput 46 10 2013 74 83
5. C. Alcaraz, and S. Zeadally Critical infrastructure protection: requirements and challenges for the 21st century Int J Crit Infrastruct Prot 8 2015 53 66
6. Alcaraz C, Miciolino EE, Wolthusen S. Structural controllability of networks for non-interactive adversarial vertex removal. In: The eighth international conference on critical information infrastructures security, Lecture notes in computer science, vol. 8328. Springer; Amsterdam, The Netherlands, 2013. p. 120-32.
7. Alcaraz C, Miciolino EE, Wolthusen S. Multi-round attacks on structural controllability properties for non-complete random graphs. In: The 16th information security conference. Springer; 2015 (In press).
8. Apache Directory Studio, 2006-2013, (http://directory.apache.org/studio/) [retrieved April 2015].
9. A. Bentaleb, A. Boubetra, and S. Harous Survey of clustering schemes in mobile ad hoc networks Commun Netw 5 2013 8 14
10. Burt GM, McDonald JR. Potential advantages of a diagnostic expert system for assisting operator response to system events. In: Third international conference on power system monitoring and control; 1991. p. 222-4.
11. Cheung H, Hamlyn A, Mander T, Cungang Y. Role-based model security access control for smart power-grids computer networks. In: IEEE on power and energy society general meeting - conversion and delivery of electrical energy in the 21st century; 2008. p. 1-7.
12. J. Cockayne, and S. Hedetniemi Towards a theory of domination in graphs Networks 7 3 1977 247 261
13. R.G. Downey, and M.R. Fellows Parameterised complexity monographs in computer science 1999 Springer-Verlag Heidelberg, Germany
14. X. Fang, S. Misra, G. Xue, and D. Yang Smart grid - the new and improved power grid: a survey IEEE Commun Surv Tutor 14 4 2012 944 980
15. H. Farhangi The path of the smart grid IEEE Power Energy Mag 8 1 2010 18 28
16. Groat S, Dunlop M, Urbanksi W, Marchany R, Tront J. Using an IPv6 moving target defense to protect the smart grid. In: 2012 IEEE PES innovative smart grid technologies (ISGT); 2012. p. 1-7.
17. S. Guha, and K. Samir Approximation algorithms for connected dominating sets Algorithmica 20 4 1998 374 387
18. V. Gungor, D. Sahin, T. Kocak, S. Ergut, C. Buccella, C. Cecati, and et al. Smart grid technologies: communication technologies and standards IEEE Trans Ind inf 7 4 2011 529 538
19. T. Haynes, S. Hedsetniemi, S. Hedetniemi, and M. Henning Domination in graphs applied to electric power networks SIAM J Discret Math 15 4 2002 519 529
20. Honeywell International. RBAC driven least privilege architecture for control systems, U.S. Department of Energy, office of electricity delivery and energy reliability; 2012. p. 1-2.
21. IEC-61850. Power utility automation - parts 1-9; 2003-2005 (http://www.iec.ch/smartgrid/standards/) [retrieved April 2015].
22. IEC-62351-4. Power systems management and associated information exchange - data and communications security - part 4: profiles including MMS; 2007, (http://www.iec.ch/smartgrid/standards/) [retrieved April 2015].
23. IEC-62351-6. Power systems management and associated information exchange - data and communications security - part 6: security for IEC-61850; 2007, (http://www.iec.ch/smartgrid/standards/) [retrieved April 2015].
24. IEC-62351-7. Power systems management and associated information exchange - data and communications security - part 7: network and system management (NSM) data object models; 2007, (http://www.iec.ch/smartgrid/standards/) [retrieved April 2015].
25. IEC-62351-8. Power systems management and associated information exchange - data and communications security - part 8: role-based access control, International Electrotechnical Commission; 2011, (http://www.iec.ch/smartgrid/standards/) [retrieved April 2015].
26. IEC-62351 Parts 1-8. Information security for power system control operations, International Electrotechnical Commission; 2007-2011, (http://www.iec.ch/smartgrid/standards/) [retrieved April 2015].
27. INCITS. For Information technology role based access control, American National Standard for Information Technology, ANSI INCITS 359-2012; 2012.
28. International Electrotechnical Commission, IEC - smart grid, (http://www.iec.ch/smartgrid/standards/) [retrieved April 2015].
29. R.E. Kalman Mathematical description of linear dynamical systems J Soc Ind Appl Math Control Ser A 1 1963 152 192
30. V. Kapsalis, L. Hadellis, D. Karelis, and S. Koubias A dynamic context-aware access control architecture for e-services Comput Secur 25 7 2006 507 521
31. J. Kneis, D. Mölle, S. Richter, and P. Rossmanith Parameterised power domination complexity Inf Process Lett 98 4 2006 145 149
32. Kuntze N, Rudolph C, Bente I, Vieweg J, Helden JV. Interoperable device identification in smart-grid environments. In: Power and energy society general meeting. IEEE; San Diego, CA, 2011. p. 1-7.
33. Kyusakov R, Eliasson J, van Deventer J, Delsing J, Cragie R. Emerging energy management standards and technologies - challenges and application prospects. In: IEEE 17th conference on emerging technologies and factory automation; 2012. p. 1-8.
34. Ulrich Lang, and Rudolf Schreiner Manageable smart grid security policy automation Inf Syst Secur Assoc J 2012 10 36
35. X. Li, X. Liang, R. Lu, X. Shen, X. Lin, and H. Zhu Securing smart grid: cyber attacks, countermeasures, and challenges IEEE Commun Mag 50 8 2012 38 45
36. C. Lin Structural controllability IEEE Trans Autom Control 19 3 1974 201 208
37. M. Majdalawieh, F. Parisi-Presicce, and R. Sandhu RBAC model for SCADA, innovative algorithms and techniques in automation industrial electronics and telecommunications 2007 Springer Netherlands 329 335 10.1007/978-1-4020-6266-7-59
38. National Cybersecurity and Communications Integration Center (NCCIC). Internet accessible control systems at risk, ICS-CERT; 2014, (https://ics-cert.us-cert.gov/sites/default/files/Monitors/ICS-CERT-Monitor-%20Jan-April2014.pdf) [retrieved April 2015].
39. T. Nguyen, W. Perkins, T. Laffery, and Dl. Pecora Knowledge base verification AI Mag 8 2 1987 65 79
40. NIST. NIST framework and roadmap for smart grid interoperability standards, Release 2.0, NIST special publication 1108R2; 2012 (http://www.nist.gov/smartgrid/upload/NIST-Framework-Release-2-0-corr.pdf) [retrieved April 2015].
41. NIST. NISTIR 7628: guidelines for smart grid cybersecurity - vol. 1, smart grid cybersecurity strategy, architecture, and high-level requirements, revision 1; 2013.
42. R. O'Keefe, and D. O'Leary Expert system verification and validation: a survey and tutorial Artif Intell Rev 1993 3 42
43. G. Pagani, and M. Aiello The power grid as a complex network: a survey Phys A: Stat Mech Appl 392 11 2013 2688 2700
44. Palmer C, Steffan J. Generating network topologies that obey power laws. In: GLOBECOM, vol. 1; 2010. p. 434-8.
45. Rosic D, Novak U, Vukmirovic S. Role-based access control model supporting regional division in Smart Grid system. In: Fifth international conference on computational intelligence, communication systems and networks (CICSyN); 2013. p. 197-201.
46. H. Samuel, W. Zhuang, and B. Preiss Improving the dominating-set routing over delay-tolerant mobile ad-hoc networks via estimating node intermeeting times EURASIP J Wirel Commun Netw 2011 2011 1 12 pp.
47. Sandia National Laboratories. The Java rule engine (JESS); 2007-2013,(http://herzberg.ca.sandia.gov) [retrieved April 2015].
48. Smith M. Definition of the inetOrgPerson LDAP object class, RFC-2798; 2010, (http://www.ietf.org/rfc/rfc2798.txt) [retrieved April 2015].
49. Veichtlbauer A, Engel D, Ressel J, Knirsch F, Langthaler O, Moser F. Advanced metering and data access infrastructures in smart grid environments. In: The seventh international conference on sensor technologies and applications (SENSORCOMM); 2013. p. 63-8.
50. W. Wang, X. Yi Xu, and K. Mohit A survey on the communication architectures in smart grid Comput Netw 55 15 2011 3604 3629
51. J. Yu, N. Wang, G. Wang, and D. Yu Connected dominating sets in wireless ad hoc and sensor networks - A comprehensive survey Comput Commun 36 2 2013 121 134
52. Zeilenga K. COSINE LDAP/X.500 schema, RFC-4524; 2006, (http://tools.ietf.org/html/rfc4524) [retrieved April 2015].