A Novel Architecture for Attack-Resilient Wide-Area Protection and Control System in Smart Grid
- Iowa State Univ., Ames, IA (United States); Iowa State University
- Iowa State Univ., Ames, IA (United States)
Wide-area protection and control (WAPAC) systems are widely applied in the energy management system (EMS) that rely on a wide-area communication network to maintain system stability, security, and reliability. As technology and grid infrastructure evolve to develop more advanced WAPAC applications, however, so do the attack surfaces in the grid infrastructure. This paper presents an attack-resilient system (ARS) for the WAPAC cybersecurity by seamlessly integrating the network intrusion detection system (NIDS) with intrusion mitigation and prevention system (IMPS). In particular, the proposed NIDS utilizes signature and behavior-based rules to detect attack reconnaissance, communication failure, and data integrity attacks. Further, the proposed IMPS applies state transition-based mitigation and prevention strategies to quickly restore the normal grid operation after cyberattacks. As a proof of concept, we validate the proposed generic architecture of ARS by performing experimental case study for wide-area protection scheme (WAPS), one of the critical WAPAC applications, and evaluate the proposed NIDS and IMPS components of ARS in a cyber-physical testbed environment. Our experimental results reveal a promising performance in detecting and mitigating different classes of cyberattacks while supporting an alert visualization dashboard to provide an accurate situational awareness in real-time.
- Research Organization:
- Iowa State University
- Sponsoring Organization:
- USDOE Office of Cybersecurity, Energy Security, and Emergency Response (CESER)
- Contributing Organization:
- Iowa State University
- DOE Contract Number:
- OE0000830
- OSTI ID:
- 1985671
- Report Number(s):
- DOE-ISU-0000830-9
- Journal Information:
- 2020 Resilience Week (RWS), Journal Name: 2020 Resilience Week (RWS)
- Country of Publication:
- United States
- Language:
- English
Similar Records
SHARP-Net: Platform for Self-Healing and Attack Resilient PMU Networks
CPS Testbed Architectures for WAMPAC using Industrial Substation and Control Center Platforms and Attack-Defense Evaluation