Paper Info
Title
Demonstrating Cyber-Physical Attacks and Defense for Synchrophasor Technology in Smart Grid.
Abstract
Synchrophasor technology is used for real-time control and monitoring in smart grid. Previous works in literature identified critical vulnerabilities in IEEE C37.118.2 synchrophasor communication standard. To protect synchrophasor-based systems, stealthy cyber-attacks and effective defense mechanisms still need to be investigated. This paper investigates how an attacker can develop a custom tool to execute stealthy man-in-the-middle attacks against synchrophasor devices. In particular, four different types of attack capabilities have been demonstrated in a real synchrophasor-based synchronous islanding testbed in laboratory: (i) command injection attack, (ii) packet drop attack, (iii) replay attack and (iv) stealthy data manipulation attack. With deep technical understanding of the attack capabilities and potential physical impacts, this paper also develops and tests a distributed Intrusion Detection System (IDS) following NIST recommendations. The functionalities of the proposed IDS have been validated in the testbed for detecting aforementioned cyber-attacks. The paper identified that a distributed IDS with decentralized decision making capability and the ability to learn system behavior could effectively detect stealthy malicious activities and improve synchrophasor network security.
Year
Venue
Field
2018
2018 16TH ANNUAL CONFERENCE ON PRIVACY, SECURITY AND TRUST (PST)
Packet drop attack,Smart grid,Computer security,Computer science,Code injection,Network security,Testbed,Cyber-physical system,Replay attack,Islanding
DocType
ISSN
Citations 
Conference
1712-364X
0
PageRank 
References 
Authors
0.34
0
5
Name
Order
Citations
PageRank
Rafiullah Khan1467.58
Kieran McLaughlin220822.19
John Hastings300.34
David M. Laverty4152.91
Sakir Sezer5101084.22