A Survey of Protocol-Level Challenges and Solutions for Distributed Energy Resource Cyber-Physical Security

Sundararajan, Aditya; Chavan, Aniket; Saleem, Danish; Sarwat, Arif I.

doi:10.3390/en11092360

Title: A Survey of Protocol-Level Challenges and Solutions for Distributed Energy Resource Cyber-Physical Security

Journal Article · Thu Sep 06 00:00:00 EDT 2018 · Energies (Basel)

DOI:https://doi.org/10.3390/en11092360· OSTI ID:1478184

^[1]; Chavan, Aniket ^[2]; Saleem, Danish ^[3]; Sarwat, Arif I. ^[1]

Florida Intl Univ., Miami, FL (United States)
Southern Methodist Univ., Dallas, TX (United States)
National Renewable Energy Lab. (NREL), Golden, CO (United States)

Here, the increasing proliferation of distributed energy resources (DERs) on the smart grid has made distributed solar and wind two key contributors to the expanding attack surface of the network; however, there is a lack of proper understanding and enforcement of DER communications security requirements. With vendors employing proprietary methods to mitigate hosts of attacks, the literature currently lacks a clear organization of the protocol-level vulnerabilities, attacks, and solutions mapped to each layer of the logical model such as the OSI stack. To bridge this gap and pave the way for future research by the authors in determining key DER security requirements, this paper conducts a comprehensive review of the key vulnerabilities, attacks, and potential solutions for solar and wind DERs at the protocol level. In doing so, this paper serves as a starting point for utilities, vendors, aggregators, and other industry stakeholders to develop a clear understanding of the DER security challenges and solutions, which are key precursors to comprehending security requirements.

View Accepted Manuscript (DOE)

Cite

Export

Save

Research Organization:: National Renewable Energy Lab. (NREL), Golden, CO (United States)

Sponsoring Organization:: USDOE National Renewable Energy Laboratory (NREL), Laboratory Directed Research and Development (LDRD) Program

Grant/Contract Number:: AC36-08GO28308

OSTI ID:: 1478184

Report Number(s):: NREL/JA-5C00-72612; ENERGA

Journal Information:: Energies (Basel), Vol. 11, Issue 9; ISSN 1996-1073

Publisher:: MDPI AGCopyright Statement

Country of Publication:: United States

Language:: English

Citation Metrics:

Cited by: 18 works

Citation information provided by
Web of Science

References (78)

The importance of testing Smart Grid IEDs against security vulnerabilities Weerathunga, Pubudu Eroshan; Cioraca, Anca 2016 69th Annual Conference for Protective Relay Engineers (CPRE) https://doi.org/10.1109/CPRE.2016.7914920	conference	April 2016
Improving Network Infrastructure Security by Partitioning Networks Running Spanning Tree Protocol Yeung, K. H.; Yan, F.; Leung, C. International Conference on Internet Surveillance and Protection (ICISP06) https://doi.org/10.1109/ICISP.2006.13	conference	January 2006
A Survey of Ethernet LAN Security Kiravuo, Timo; Sarela, Mikko; Manner, Jukka IEEE Communications Surveys & Tutorials, Vol. 15, Issue 3 https://doi.org/10.1109/SURV.2012.121112.00190	journal	October 2013
Internet of Things (IoT) communication protocols: Review Al-Sarawi, Shadi; Anbar, Mohammed; Alieyan, Kamal 2017 8th International Conference on Information Technology (ICIT) https://doi.org/10.1109/ICITECH.2017.8079928	conference	May 2017
A review on security and privacy issues in wireless sensor networks SunilKumar, K. N. 2017 2nd IEEE International Conference on Recent Trends in Electronics, Information & Communication Technology (RTEICT) https://doi.org/10.1109/RTEICT.2017.8256945	conference	May 2017
OSI upper layer protocol requirements for TMN operations Raman, L. G. IEEE INFOCOM '88,Seventh Annual Joint Conference of the IEEE Computer and Communcations Societies. Networks: Evolution or Revolution? https://doi.org/10.1109/INFCOM.1988.12912	conference	January 1988
Malicious JavaScript Insertion through ARP Poisoning Attacks Zdrnja, Bojan IEEE Security & Privacy Magazine, Vol. 7, Issue 3 https://doi.org/10.1109/MSP.2009.72	journal	May 2009
Research based on OSI model Li, Yadong; Li, Danlan; Cui, Wenqiang 2011 IEEE 3rd International Conference on Communication Software and Networks (ICCSN) https://doi.org/10.1109/ICCSN.2011.6014631	conference	May 2011
Development of unidirectional security gateway appliance using intel 82580EB NIC interface Heo, Youngjun; Na, Jungchan 2016 International Conference on Information and Communication Technology Convergence (ICTC) https://doi.org/10.1109/ICTC.2016.7763404	conference	October 2016
Rapid migration of VMs on a datacenter under cyber attack over optical infrastructure Karakoc, Emre; Dikbiyik, Ferhat 2016 HONET-ICT https://doi.org/10.1109/HONET.2016.7753450	conference	October 2016
Short Paper: IP spoofing detection for preventing DDoS attack in Cloud Computing Osanaiye, Opeyemi A. 2015 18th International Conference on Intelligence in Next Generation Networks (ICIN) https://doi.org/10.1109/ICIN.2015.7073820	conference	January 2015
Integrated TCP/IP protocol software testing for vulnerability detection 2003 International Conference on Computer Networks and Mobile Computing. ICCNMC 2003, 2003 International Conference on Computer Networks and Mobile Computing, 2003. ICCNMC 2003. https://doi.org/10.1109/ICCNMC.2003.1243061	conference	January 2003
Integrity based relationships and trustworthy communication between network participants Oberle, Alexander; Larbig, Pedro; Kuntze, Nicolai ICC 2014 - 2014 IEEE International Conference on Communications, 2014 IEEE International Conference on Communications (ICC) https://doi.org/10.1109/ICC.2014.6883386	conference	June 2014
Cyber intrusion of wind farm SCADA system and its impact analysis Yan, Jie; Liu, Chen-Ching; Govindarasu, Manimaran 2011 IEEE/PES Power Systems Conference and Exposition (PSCE) https://doi.org/10.1109/PSCE.2011.5772593	conference	March 2011
Light weight approach for IP-ARP spoofing detection and prevention Bhirud, S. G.; Katkar, Vijay 2011 Second Asian Himalayas International Conference on Internet (AH-ICI) https://doi.org/10.1109/AHICI.2011.6113951	conference	November 2011
FTTH network survivability security based on massive fiber optic mechanical switch in consolidated central office 2010 9th International Conference on the Optical Internet (COIN), Digest of the 9th International Conference on Optical Internet (COIN 2010) https://doi.org/10.1109/COIN.2010.5546557	conference	July 2010
Security features in ethernet switches for access networks Guruprasad, A.; Pandey, P.; Prashant, B. TENCON 2003. Conference on Convergent Technologies for Asia-Pacific Region https://doi.org/10.1109/TENCON.2003.1273439	conference	January 2003
Comparative Evaluation of Spoofing Defenses Mirkovic, Jelena; Kissel, Ezra IEEE Transactions on Dependable and Secure Computing, Vol. 8, Issue 2 https://doi.org/10.1109/TDSC.2009.44	journal	March 2011
An improved secret key update for multiple intersymbol obfuscation in physical layer security Ramnath, Deepika; Deepak, Tejas; Krishnakumar, Kiran 2017 International Conference on Advances in Computing, Communications and Informatics (ICACCI) https://doi.org/10.1109/ICACCI.2017.8125839	conference	September 2017
The Security and Promotion Method of Transport Layer of TCP/IP Agreement Hao-yu, Wang; Hui-zhi, Cao; Xu, Zhu 2010 2nd International Conference on Information Technology and Computer Science (ITCS 2010), 2010 Second International Conference on Information Technology and Computer Science https://doi.org/10.1109/ITCS.2010.132	conference	July 2010
Transport Level Address for application level communication De Silva, Suranjith 2009 2nd IEEE International Conference on Computer Science and Information Technology https://doi.org/10.1109/ICCSIT.2009.5234954	conference	August 2009
Quantum Cryptography For Secure Optical Networks Kartalopoulos, S. V. 2007 IEEE International Conference on Communications https://doi.org/10.1109/ICC.2007.221	conference	June 2007
Building blocks of a simulation environment of the OSI network layer of packet-switching networks Gerisch, A.; Lawniczak, A. T.; Di Stefano, B. CCECE 2003 - Canadian Conference on Electrical and Computer Engineering. Toward a Caring and Humane Technology (Cat. No.03CH37436) https://doi.org/10.1109/CCECE.2003.1226080	conference	January 2003
Telecommunication traffic through submarine cables: Security and vulnerabilities Alazri, Aisha Suliaman 2016 11th International Conference for Internet Technology and Secured Transactions (ICITST) https://doi.org/10.1109/ICITST.2016.7856733	conference	December 2016
A Survey of Man In The Middle Attacks Conti, Mauro; Dragoni, Nicola; Lesyk, Viktor IEEE Communications Surveys & Tutorials, Vol. 18, Issue 3 https://doi.org/10.1109/COMST.2016.2548426	journal	October 2016
Data security on Ethernet LANs Hadjina, N.; Thompson, P. 10th Mediterranean Electrotechnical Conference - MELECON 2000, 2000 10th Mediterranean Electrotechnical Conference. Information Technology and Electrotechnology for the Mediterranean Countries. Proceedings. MeleCon 2000 (Cat. No.00CH37099) https://doi.org/10.1109/MELCON.2000.880359	conference	January 1998
A comprehensive study on security attacks on SSL/TLS protocol Sirohi, Preeti; Agarwal, Amit; Tyagi, Sapna 2016 2nd International Conference on Next Generation Computing Technologies (NGCT) https://doi.org/10.1109/NGCT.2016.7877537	conference	October 2016
A survey on security assessment of metering infrastructure in Smart Grid systems Anzalchi, Arash; Sarwat, Arif SoutheastCon 2015 https://doi.org/10.1109/SECON.2015.7132989	conference	April 2015
End-to-end encryption at the network layer Nelson, R. [1989 Proceedings] Fifth Annual Computer Security Applications Conference https://doi.org/10.1109/CSAC.1989.81020	conference	January 1990
Primary frequency control and dynamic grid support for vehicle-to-grid in transmission systems Hernández, J. C.; Sanchez-Sutil, F.; Vidal, P. G. International Journal of Electrical Power & Energy Systems, Vol. 100 https://doi.org/10.1016/j.ijepes.2018.02.019	journal	September 2018
Wireless transmission of RS232 interface signal based on ZigBee Luo, Guoxin 2010 International Conference on Anti-Counterfeiting, Security and Identification (2010 ASID) https://doi.org/10.1109/ICASID.2010.5551491	conference	July 2010
A Thin Security Layer Protocol over IP Protocol on TCP/IP Suite for Security Enhancement Al-Jarrah, Mohammad; Tamimi, Abdel-karim 2006 Innovations in Information Technology https://doi.org/10.1109/INNOVATIONS.2006.301920	conference	November 2006
Analysis and application of Wireshark in TCP/IP protocol teaching 2010 International Conference on E-Health Networking, Digital Ecosystems and Technologies (EDT), 2010 International Conference on E-Health Networking Digital Ecosystems and Technologies (EDT) https://doi.org/10.1109/EDT.2010.5496372	conference	April 2010
Transport layer proxy for stateful UDP packet filtering Chang, R. K. C.; Fung, K. P. Proceedings ISCC 2002 Seventh International Symposium on Computers and Communications https://doi.org/10.1109/ISCC.2002.1021735	conference	January 2002
Controlling IP Spoofing through Interdomain Packet Filters IEEE Transactions on Dependable and Secure Computing, Vol. 5, Issue 1 https://doi.org/10.1109/TDSC.2007.70224	journal	January 2008
Research on the network security based on radiated virus 2010 International Conference on Information, Networking and Automation (ICINA 2010), 2010 International Conference on Information, Networking and Automation (ICINA) https://doi.org/10.1109/ICINA.2010.5636462	conference	October 2010
Enhanced utility-scale photovoltaic units with frequency support functions and dynamic grid support for transmission systems Hernández, Jesus C.; Bueno, Pedro G.; Sanchez-Sutil, Francisco IET Renewable Power Generation, Vol. 11, Issue 3 https://doi.org/10.1049/iet-rpg.2016.0714	journal	February 2017
Smart grids security challenges: Classification by sources of threats Otuoze, Abdulrahaman Okino; Mustafa, Mohd Wazir; Larik, Raja Masood Journal of Electrical Systems and Information Technology, Vol. 5, Issue 3 https://doi.org/10.1016/j.jesit.2018.01.001	journal	December 2018
A link-layer-based self-replicating vulnerability discovery agent Al-Salloum, Ziyad S.; Wolthusen, Stephen D. 2010 IEEE Symposium on Computers and Communications (ISCC), The IEEE symposium on Computers and Communications https://doi.org/10.1109/ISCC.2010.5546723	conference	June 2010
Fairness issues for mixed TCP/OSI internets Wilder, R. MILCOM 91 - Conference record https://doi.org/10.1109/MILCOM.1991.258229	conference	January 1991
Communications Link Layer Security Tu, Kwei 2006 International Conference on Communication Technology https://doi.org/10.1109/ICCT.2006.341721	conference	November 2006
Performance Comparison of TCP, UDP, and TFRC in Wired Networks Pakanati, Chennareddy; Padmavathamma, M.; Reddy, N. Ramanjaneya 2015 IEEE International Conference on Computational Intelligence & Communication Technology (CICT) https://doi.org/10.1109/CICT.2015.37	conference	February 2015
Cyber security vulnerability assessment for Smart substations 2016 IEEE PES Asia-Pacific Power and Energy Engineering Conference (APPEEC) https://doi.org/10.1109/APPEEC.2016.7779741	conference	October 2016
Traffic flow confidentiality security service in OSI computer network architecture Ramaswamy, R. IEEE TENCON'90: 1990 IEEE Region 10 Conference on Computer and Communication Systems. Conference Proceedings https://doi.org/10.1109/TENCON.1990.152690	conference	January 1990
Security in the OSI model Buffenoir, Thierry Computer Standards & Interfaces, Vol. 7, Issue 1-2 https://doi.org/10.1016/0920-5489(88)90059-1	journal	January 1988
An interactive visualization tool for teaching ARP spoofing attack Scott, Brandon; Xu, Jinsheng; Zhang, Jinghua 2017 IEEE Frontiers in Education Conference (FIE) https://doi.org/10.1109/FIE.2017.8190531	conference	October 2017
Adaptive cross-layer-based TCP congestion control for 4G wireless mobile cloud access Chang, Ben-Jye; Liang, Ying-Hsin; Jin, Jun-Yu 2016 IEEE International Conference on Consumer Electronics-Taiwan (ICCE-TW) https://doi.org/10.1109/ICCE-TW.2016.7520952	conference	May 2016
A security standard for LANs Kirkpatrick, M. E. [1989 Proceedings] Fifth Annual Computer Security Applications Conference https://doi.org/10.1109/CSAC.1989.81019	conference	January 1990
OSI Reference Model--The ISO Model of Architecture for Open Systems Interconnection Zimmermann, H. IEEE Transactions on Communications, Vol. 28, Issue 4 https://doi.org/10.1109/TCOM.1980.1094702	journal	April 1980
Cross layer approach for detection and prevention of Sinkhole Attack using a mobile agent Aryai, S.; Binu, G. S. 2017 2nd International Conference on Communication and Electronics Systems (ICCES) https://doi.org/10.1109/CESYS.2017.8321299	conference	October 2017
Packet scheduling attacks on shipboard networked control systems Penera, Eric; Chasaki, Danai 2015 Resilience Week (RWS) https://doi.org/10.1109/RWEEK.2015.7287421	conference	August 2015
Cyber-power system security in a smart grid environment Stefanov, Alexandru; Liu, Chen-Ching 2012 IEEE PES Innovative Smart Grid Technologies (ISGT) https://doi.org/10.1109/ISGT.2012.6175560	conference	January 2012
Security Implications of Transport Layer Protocols in Power Grid Synchrophasor Data Communication Wang, Yujue; Gamage, Thoshitha T.; Hauser, Carl H. IEEE Transactions on Smart Grid https://doi.org/10.1109/TSG.2015.2499766	journal	January 2015
Authenticated anonymous secure on demand routing protocol in VANET (Vehicular adhoc network) Logeshwari, K.; Lakshmanan, L. 2017 International Conference on Information Communication and Embedded Systems (ICICES) https://doi.org/10.1109/ICICES.2017.8070730	conference	February 2017
Smart Home Communication Technologies and Applications: Wireless Protocol Assessment for Home Area Network Resources Mendes, Tiago; Godina, Radu; Rodrigues, Eduardo Energies, Vol. 8, Issue 7 https://doi.org/10.3390/en8077279	journal	July 2015
Cyber attack models for smart grid environments Eder-Neuhauser, Peter; Zseby, Tanja; Fabini, Joachim Sustainable Energy, Grids and Networks, Vol. 12 https://doi.org/10.1016/j.segan.2017.08.002	journal	December 2017
Detecting SIP flooding attacks on IP Multimedia Subsystem (IMS) Chen, Zhiqiang; Wen, Wushao; Yu, Da 2012 International Conference on Computing, Networking and Communications (ICNC) https://doi.org/10.1109/ICCNC.2012.6167401	conference	January 2012
Electric Utility Enterprise Architecture to Support the Smart Grid - Enterprise Architecture for the Smart Grid [Electric Utility Enterprise Architecture to Support the Smart Grid - Enterprise Architecture for the Smart Grid] Parra, I.; Rodríguez, A.; Arroyo-Figueroa, G. Proceedings of the 11th International Conference on Informatics in Control, Automation and Robotics https://doi.org/10.5220/0005014006730679	conference	September 2014
Cyber security attacks on network with transition mechanisms Narayan, Shaneel; Gupta, Ruchinav; Kumar, Avinesh 2015 International Conference on Computing and Network Communications (CoCoNet) https://doi.org/10.1109/CoCoNet.2015.7411182	conference	December 2015
Defending mechanisms for protecting power systems against intelligent attacks Wei, Longfei; Moghadasi, Amir Hasan; Sundararajan, Aditya 2015 10th System of Systems Engineering Conference (SoSE) https://doi.org/10.1109/SYSOSE.2015.7151941	conference	May 2015
An open network management architecture: OSI/NM Forum architecture and concepts Embry, J.; Manson, P.; Milham, D. IEEE Network, Vol. 4, Issue 4 https://doi.org/10.1109/65.56547	journal	July 1990
What protection engineers need to know about networking Cioraca, Anca; Voloh, Ilia; Adamiak, Mark 2015 68th Annual Conference for Protective Relay Engineers https://doi.org/10.1109/CPRE.2015.7102197	conference	March 2015
A survey on ARP cache poisoning and techniques for detection and mitigation Meghana, Jitta Sai; Subashri, T.; Vimal, K. R. 2017 Fourth International Conference on Signal Processing,Communication and Networking (ICSCN), 2017 Fourth International Conference on Signal Processing, Communication and Networking (ICSCN) https://doi.org/10.1109/ICSCN.2017.8085417	conference	March 2017
UDP based chat application Malhotra, Akshit; Sharma, Vaibhav; Gandhi, Prateek 2010 2nd International Conference on Computer Engineering and Technology https://doi.org/10.1109/ICCET.2010.5486192	conference	April 2010
Analysis of low-rate TCP DoS attack against FAST TCP Dong, Kuo; Yang, Shoubao; Wang, Shaolin 2006 6th International Conference on Intelligent Systems Design and Applications, Sixth International Conference on Intelligent Systems Design and Applications https://doi.org/10.1109/ISDA.2006.12	conference	October 2006
Research on the effects of transport protocols on the application performance based on OPNET Cai, Lei; Pan, Yun; Guo, Yi-Lin 2016 IEEE/ACIS 15th International Conference on Computer and Information Science (ICIS) https://doi.org/10.1109/ICIS.2016.7550936	conference	June 2016
Real time test bed development for power system operation, control and cyber security 2010 North American Power Symposium (NAPS 2010), North American Power Symposium 2010 https://doi.org/10.1109/NAPS.2010.5618985	conference	September 2010
Design of framework and analysis of Internet of things at data link layer Sharma, Geetika; Pandey, Nitin; Hussain, Iqra 2017 2nd International Conference on Telecommunication and Networks (TEL-NET) https://doi.org/10.1109/TEL-NET.2017.8343520	conference	August 2017
Context Information based Cyber Security Defense of Protection System Su, Sheng; Duan, Xianzhong; Zeng, Xiangjun 2007 IEEE Power Engineering Society General Meeting https://doi.org/10.1109/PES.2007.385649	conference	June 2007
Analysis of UDP DDoS flood cyber attack and defense mechanisms on Web Server with Linux Ubuntu 13 Kolahi, Samad S.; Treseangrat, Kiattikul; Sarrafpour, Bahman 2015 International Conference on Communications, Signal Processing, and their Applications (ICCSPA), 2015 International Conference on Communications, Signal Processing, and their Applications (ICCSPA'15) https://doi.org/10.1109/ICCSPA.2015.7081286	conference	February 2015
Powerful IEDs, ethernet networks and their effects on IEC 61850-based electric power utilities security Hadbah, A.; Kalam, A.; Zayegh, Aladin 2017 Australasian Universities Power Engineering Conference (AUPEC) https://doi.org/10.1109/AUPEC.2017.8282415	conference	November 2017
Orchestration of reliable three-layer networks 2017 19th International Conference on Transparent Optical Networks (ICTON) https://doi.org/10.1109/ICTON.2017.8024938	conference	July 2017
Security problems in the TCP/IP protocol suite Bellovin, S. M. ACM SIGCOMM Computer Communication Review, Vol. 19, Issue 2 https://doi.org/10.1145/378444.378449	journal	April 1989
Maximizing Ethernet Security by Switch-Based Single Secure Domain Wahid, Khan Ferdous 2010 Seventh International Conference on Information Technology: New Generations https://doi.org/10.1109/ITNG.2010.143	conference	April 2010
Secure group communication schemes for dynamic heterogeneous distributed computing Castiglione, Arcangelo; D’Arco, Paolo; De Santis, Alfredo Future Generation Computer Systems, Vol. 74 https://doi.org/10.1016/j.future.2015.11.026	journal	September 2017
An Architecture for Multi-Security Level Network Traffic Witzke, Edward; Gossage, Steve; Wiener, Dallas Proceedings 40th Annual 2006 International Carnahan Conference on Security Technology https://doi.org/10.1109/CCST.2006.313455	conference	October 2006
IP network-based trust management system Wang, Yan-hong 2011 Eighth International Conference on Fuzzy Systems and Knowledge Discovery (FSKD 2011), 2011 Eighth International Conference on Fuzzy Systems and Knowledge Discovery (FSKD) https://doi.org/10.1109/FSKD.2011.6019936	conference	July 2011
Demystifying and Rate Limiting ICMP hosted DoS/DDoS Flooding Attacks with Attack Productivity Analysis Udhayan, J.; Anitha, R. 2009 IEEE International Advance Computing Conference (IACC 2009) https://doi.org/10.1109/IADCC.2009.4809072	conference	March 2009

Cited By (1)

Assessing the Impact of Cybersecurity Attacks on Power Systems Dagoumas, Athanasios Energies, Vol. 12, Issue 4 https://doi.org/10.3390/en12040725	journal	February 2019

Similar Records

PV Cyber Security Research (Final Report)

Technical Report · Tue Jan 15 00:00:00 EST 2019 · OSTI ID:1478184

Johnson, Jay Tillay

GRIDCHAIN: AN AUDITABLE BLOCKCHAIN FOR SMART GRID DATA INTEGRITY AND IMMUTABILITY

Technical Report · Tue Mar 31 00:00:00 EDT 2020 · OSTI ID:1478184

Xie, Bin

A critical review of cyber-physical security for building automation systems

Journal Article · Thu Mar 09 00:00:00 EST 2023 · Annual Reviews in Control · OSTI ID:1478184

Li, Guowen; Ren, Lingyu; Fu, Yangyang; +7 more

Related Subjects

24 POWER TRANSMISSION AND DISTRIBUTION
DER
photovoltaic
wind turbine
communications
protocols
SCADA
standards
enforcement
challenges
solutions
security requirements

Title: A Survey of Protocol-Level Challenges and Solutions for Distributed Energy Resource Cyber-Physical Security

Citation Formats

References (78)

Cited By (1)

Similar Records

Related Subjects