Investigating cyber-physical attacks against IEC 61850 photovoltaic inverter installations

IEEE International Conference on Emerging Technologies and Factory Automation, ETFA

Volumn 2015-October, Issue , 2015, Pages

  Kang, BooJoong ^a   Maynard, Peter ^a   McLaughlin, Kieran ^a   Sezer, Sakir ^a   Andrén, Filip ^b   Seitl, Christian ^b   Kupzog, Friederich ^b   Strasser, Thomas ^b  

^a QUEEN'S UNIVERSITY BELFAST   (United Kingdom)

^b AIT AUSTRIAN INSTITUTE OF TECHNOLOGY   (Austria)

Author keywords

IEC 61850; man in the middle attack; photovoltaics; Smart Grid security

Indexed keywords

AUTOMATION; COMPUTER CRIME; CRIME; ELECTRIC INVERTERS; ELECTRIC POWER SYSTEM PROTECTION; ELECTRIC POWER TRANSMISSION NETWORKS; ELECTRIC SUBSTATIONS; ENERGY RESOURCES; FACTORY AUTOMATION; INTELLIGENT CONTROL; NETWORK SECURITY; SMART POWER GRIDS; STANDARDS;

DISTRIBUTED ENERGY RESOURCES; IEC 61850; INDUSTRIAL CONTROL SYSTEMS; MAN IN THE MIDDLE ATTACKS; MANUFACTURING MESSAGE SPECIFICATION; PHOTOVOLTAICS; SMART GRID; SMART GRID COMMUNICATIONS;

MALWARE;

EID: 84952888996     PISSN: 19460740     EISSN: 19460759     Source Type: Conference Proceeding    
DOI: 10.1109/ETFA.2015.7301457     Document Type: Conference Paper

References (22)

1. ICS-CERT, "ICS focuses malware (update A)," ICS-ALERT-14-176-02A, June 2014.
2. ICS-CERT, "Ongoing sophisticated malware campaign compromising ICS (update B)," ICS-ALERT-14-281-01B, December 2014.
3. Bundesamt für Sicherheit in der Information (BSI), "Die Lage der ITsicherheit in Deutschland 2014," November 2014.
4. R.E. Mackiewicz, "Overview of IEC 61850 and benefits," in Proc. IEE Power Systems Conference and Exposition (PSCE), pp. 623-630, 2006.
5. M. Robinson, "The SCADA threat landscape," in Proc. first International Symposium for ICS & SADA Cyber Security Research, pp. 30-41, September 2013.
6. T.H. Morris and W. Gao, "Industrial control system cyber attacks," in Proc. first Internation Symposium for ICS & SCADA Cyber Security Research, pp. 22-29, September 2013.
7. Y. Yang, K. McLaughlin, T. Littler, S. Sezer, E.G. Im, Z.Q. Yao, B. Pranggono, H.F. Wang, "Man-in-the-middle attack test-bed investigating cyber-security vulnerabilities in smart grid SCADA systems,", in Proc. International Conference on Sustainable Power Generation and Supply (SUPERGEN), pp. 1-8, 2012.
8. W. Gao, T. Morris, B. Reaves, D. Richey, "On SCADA control system command and response injection and intrusion detection,", eCrime Researchers Summit (eCrime), pp. 1-9, 2010.
9. J. Hoyos, M. Dehus, T.X. Brown, "Exploiting the GOOSE protocl: a practical attack on cyber-infrastructgure," GC'12 Workshop: Smart Grid Communication: Design for Performance, 2012.
10. N. Kush, E. Ahmed, M. Branagan, E. Foo, "Poisoned GOOSE: exploiting the GOOSE prtocol," ACSW-AISC 2014, Auckland, New Zealand, January 2014.
11. J. Hong, C. Liu, M. Govindarasu, "Integrated anomaly detection for cyber security of the substations," IEEE Transactions on Smart Grid, vol. 5, no. 4, pp. 1643-1653, 2014.
12. J.T. Sorensen and M.G. Jaatun, "An analysis of the manufacturing messaging specification protocol," in Proc. 5th Internation Conference on Ubiquitous Intelligence in Computing, Oslo, Norway, June 2008.
13. P. Maynard, K. McLaughlin, B. Haberler, "Towards understanding manin-the-middle attacks on IEC 60870-5-104 SCADA networks," in Proc. 2nd Internation Symposium for ICS & SCADA Cyber Security Research, 2014.
14. R. Bründlinger, T. Strasser, G. Lauss, A. Hoke, S. Chakraborty, G. Martin, B. Kroposki, J. Johnson, E. de Jong, "Lab tests: verifying that smart grid power converters are truly smart," IEEE Power and Energy Magazine, vol. 13, no. 2, pp. 30-42, 2015.
15. R. Zurawski, "The industrial information technology handbook," CRC Press, 2004.
16. National Electric Sector Cybersecurity Organization Resource (NESCOR), "Electric sector failure scenarios and impact analyses version 1.0," Technical Paper, Electric Power Research Institute (EPRI), September 2013.
17. Union for the Co-ordination of Tranmission of Electricity (UCTE), "Final report system disturbance on 4 November 2006," 2007
18. A. Gaviano, K. Weber, C. Dirmeier, "Challenges and integration of PV and wind energy facilities from a smart grid point of view," Energy Procedia, vol. 25, pp. 118-125, 2012.
19. F. Andren, R. Bründlinger, T. Strasser, "IEC 61850/61499 control of distributed energy resources: concept, guidelines, and implementation," IEEE Transactions on Energy Conversion, vol. 29, no. 4, pp. 1008-1017, 2014.
20. F. Cleveland, "IEC 62351 security standards for the power system information infrastructure," IEC TC57 WG15 Security Standards ver 14, June 2012.
21. IEC TS 62351-4, "Power systems management and associated information exchange Data and communications security, Part 4: profiles including MMS," June 2007.
22. M.M.R. Chowdhury, H. Raddatz, J.E.Y. Rossebo, "Challenges when securing manufacturing message service in legacy industrial control system," IEEE Emerging Technology and Factory Automation, 2014.