Type and Verification of Network Attacks on Embedded Terminals of Intelligent Substation

doi:10.11930/j.issn.1004-9649.201912050

Abstract

Abstract: A comprehensive understanding of the ways of network attacks on the embedded terminals of intelligent substation and their impacts on the primary power system is the basis for taking effective security protection measures. At present, most researches on the embedded terminal attack of intelligent substation focus on the single type of network attack and stay in the theoretical analysis stage, and no verification is conducted on the presented types of network attack. Based on a vulnerability analysis of the embedded terminals of intelligent substation and their communication environment, the types of network attacks on the terminals are summarized in terms of the data sources and detection methods required for attack detection. Then, an attack verification scheme is proposed with combination of physical testing and simulation. Meanwhile, the principles of flooding and message attacks are analyzed, and the construction methods of the corresponding attack tools are presented. Finally, the constructed attack tools are tested in the experiment environment of the designed verification scheme. The test results show that the presented two attacks can affect the embedded terminals of intelligent substation and the primary equipment, and the embedded terminals are poor in resisting flooding attack.

Key words: intelligent substation, embedded terminal, network attack, attack verification

HE Jindong, WANG Yu, ZHAO Zhichao, LI June, XIE Xinzhi, ZHANG Ruiwen, LIU Yuqing, QIU Dexi. Type and Verification of Network Attacks on Embedded Terminals of Intelligent Substation[J]. Electric Power, 2020, 53(1): 81-91.

Add to citation manager EndNote|Ris|BibTeX

URL: https://www.electricpower.com.cn/EN/10.11930/j.issn.1004-9649.201912050

https://www.electricpower.com.cn/EN/Y2020/V53/I1/81

References

[1] 梁潇. 嵌入式电力测控设备信息安全分析与工作建议[C]//2012电力行业信息化年会论文集. 北京, 2012:194-197.
[2] 韩丽芳, 胡博文, 杨军, 等. 基于攻击预测的电力CPS安全风险评估[J]. 中国电力, 2019, 52(1):48-56
HAN Lifang, HU Bowen, YANG Jun, et al. A new security risk assessment method for cyber physical power system based on attack prediction[J]. Electric Power, 2019, 52(1):48-56
[3] 应欢, 刘松华, 韩丽芳, 等. 电力工业控制系统安全技术综述[J]. 电力信息与通信技术, 2018, 16(3):56-63
YING Huan, LIU Songhua, HAN Lifang, et al. Overview of power industry control system security technology[J]. Electric Power Information and Communication Technology, 2018, 16(3):56-63
[4] 杨国泰, 王宇飞, 罗剑波, 等. 电力CPS信息网络脆弱性及其评估方法[J]. 中国电力, 2018, 51(1):83-89
YANG Guotai, WANG Yufei, LUO Jianbo, et al. Electric CPS information network vulnerability and assessment method[J]. Electric Power, 2018, 51(1):83-89
[5] 锁延锋, 王少杰, 秦宇, 等. 工业控制系统的安全技术与应用研究综述[J]. 计算机科学, 2018, 45(4):25-33
SUO Yanfeng, WANG Shaojie, QIN Yu, et al. Summary of security technology and application in industrial control system[J]. Computer Science, 2018, 45(4):25-33
[6] HONG J, LIU C C, GOVINDARASU M. Detection of cyber intrusions using network-based multicast messages for substation automation[C]//ISGT 2014, February 19-22, 2014. Washington, DC, USA. IEEE, 2014:1-5.
[7] RASHID M T A, YUSSOF S, YUSOFF Y, et al. A review of security attacks on IEC61850 substation automation system network[C]//Proceedings of the 6th International Conference on Information Technology and Multimedia, November 18-20, 2014. Putrajaya, Malaysia. IEEE, 2014:5-10..
[8] HOYOS J, DEHUS M, BROWN T X. Exploiting the GOOSE protocol:a practical attack on cyber-infrastructure[C]//2012 IEEE Globecom Workshops, December 3-7, 2012. Anaheim, CA, USA. IEEE, 2012:1508-1513.
[9] LIANG G Q, ZHAO J H, LUO F J, et al. A review of false data injection attacks against modern power systems[J]. IEEE Transactions on Smart Grid, 2017, 8(4):1630-1638.
[10] 王电钢, 黄林, 刘捷, 等. 考虑负荷虚假数据注入攻击的电力信息物理系统防御策略[J]. 电力系统保护与控制, 2019, 47(1):28-34
WANG Diangang, HUANG Lin, LIU Jie, et al. Cyber-physical system defense strategy considering loaded false data injection attacks[J]. Power System Protection and Control, 2019, 47(1):28-34
[11] 丁明, 李晓静, 张晶晶. 面向SCADA的网络攻击对电力系统可靠性的影响[J]. 电力系统保护与控制, 2018, 46(11):37-45
DING Ming, LI Xiaojing, ZHANG Jingjing. Effect of SCADA-oriented cyber attack on power system reliability[J]. Power System Protection and Control, 2018, 46(11):37-45
[12] DENG R L, XIAO G X, LU R X, et al. False data injection on state estimation in power systems:attacks, impacts, and defense:A survey[J]. IEEE Transactions on Industrial Informatics, 2017, 13(2):411-423.
[13] BHARDWAJ A, SUBRAHMANYAM G V B, AVASTHI V, et al. DDoS attacks, new DDoS taxonomy and mitigation solutions:a survey[C]//2016 International Conference on Signal Processing, Communication, Power and Embedded System (SCOPES), October 3-5, 2016. Paralakhemundi, Odisha, India. IEEE, 2016:793−798.
[14] KUSH N, AHMED E, BRANAGAN M, et al. Poisoned GOOSE:exploiting the GOOSE protocol[C]//Twelfth Australasian Information Security Conference. Australian Computer Society. 2014:17−22.
[15] 王琦, 李梦雅, 汤奕, 等. 电力信息物理系统网络攻击与防御研究综述(一)建模与评估[J]. 电力系统自动化, 2019, 43(9):9-21
WANG Qi, LI Mengya, TANG Yi, et al. A review on research of cyber-attacks and defense in cyber physical power systems part one modelling and evaluation[J]. Automation of Electric Power Systems, 2019, 43(9):9-21
[16] LOPEZ C, SARGOLZAEI A, SANTANA H, et al. Smart grid cyber security:an overview of threats and countermeasures[J]. Journal of Energy and Power Engineering, 2015, 9(7):632-647.
[17] 张盛杰, 顾昊旻, 李祉岐, 等. 电力工业控制系统信息安全风险分析与应对方案[J]. 电力信息与通信技术, 2017, 15(4):96-102
ZHANG Shengjie, GU Haomin, LI Zhiqi, et al. The information security risk analysis and response plan for power industry control system[J]. Electric Power Information and Communication Technology, 2017, 15(4):96-102
[18] 李中伟, 佟为明, 金显吉. 智能电网信息安全防御体系与信息安全测试系统构建乌克兰和以色列国家电网遭受网络攻击事件的思考与启示[J]. 电力系统自动化, 2016, 40(8):147-151
LI Zhongwei, TONG Weiming, JIN Xianji. Construction of cyber security defense hierarchy and cyber security testing system of smart grid:thinking and enlightenment for network attack events to national power grid of Ukraine and Israel[J]. Automation of Electric Power Systems, 2016, 40(8):147-151
[19] 丁杰, 奚后玮, 陈爱林, 等. 基于IEC 62351安全体系的变电站自动化系统[J]. 电网技术, 2006, 30(增刊2):345−348.
DING Jie, XI Houwei, CHEN Ailin, et al. Research on substation automation system based on IEC 62351 security standards[J]. Power System Technology, 2006, 30(S2):345−348.