Behavior analysis and anomaly detection for a digital substation on cyber-physical system

Yoojin Kwon; Sangyoum Lee; Ralph King; Jong In Lim; Huy Kang Kim

doi:10.3390/electronics8030326

Behavior analysis and anomaly detection for a digital substation on cyber-physical system

Yoojin Kwon, Sangyoum Lee, Ralph King, Jong In Lim, Huy Kang Kim

School of Cybersecurity

Research output: Contribution to journal › Article › peer-review

12 Citations (Scopus)

Abstract

The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.

Original language	English
Article number	326
Journal	Electronics (Switzerland)
Volume	8
Issue number	3
DOIs	https://doi.org/10.3390/electronics8030326
Publication status	Published - 2019 Mar

Keywords

CPS testbed
Cyber-physical system
Digital substation
IEC 61850
IEC 62351-7
Network management system

ASJC Scopus subject areas

Control and Systems Engineering
Signal Processing
Hardware and Architecture
Computer Networks and Communications
Electrical and Electronic Engineering

Access to Document

10.3390/electronics8030326

Cite this

@article{30cbb4f13eb54c2083864d13483444b7,

title = "Behavior analysis and anomaly detection for a digital substation on cyber-physical system",

abstract = "The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.",

keywords = "CPS testbed, Cyber-physical system, Digital substation, IEC 61850, IEC 62351-7, Network management system",

author = "Yoojin Kwon and Sangyoum Lee and Ralph King and Lim, {Jong In} and Kim, {Huy Kang}",

note = "Funding Information: Funding: This research was funded by the Electric Power Research Institute grant number 2002010587 and by Korea Electric Power Research Institute grant number R16IA08 and R16CA04. Funding Information: This research was funded by the Electric Power Research Institute grant number 2002010587 and by Korea Electric Power Research Institute grant number R16IA08 and R16CA04. This research is based on work supported by the Electric Power Research Institute under KEPCO Implementation of the IEC 62351-7 Standard. Publisher Copyright: {\textcopyright} 2019 by the authors. Licensee MDPI, Basel, Switzerland.",

year = "2019",

month = mar,

doi = "10.3390/electronics8030326",

language = "English",

volume = "8",

journal = "Electronics (Switzerland)",

issn = "2079-9292",

publisher = "Multidisciplinary Digital Publishing Institute (MDPI)",

number = "3",

}

TY - JOUR

T1 - Behavior analysis and anomaly detection for a digital substation on cyber-physical system

AU - Kwon, Yoojin

AU - Lee, Sangyoum

AU - King, Ralph

AU - Lim, Jong In

AU - Kim, Huy Kang

N1 - Funding Information: Funding: This research was funded by the Electric Power Research Institute grant number 2002010587 and by Korea Electric Power Research Institute grant number R16IA08 and R16CA04. Funding Information: This research was funded by the Electric Power Research Institute grant number 2002010587 and by Korea Electric Power Research Institute grant number R16IA08 and R16CA04. This research is based on work supported by the Electric Power Research Institute under KEPCO Implementation of the IEC 62351-7 Standard. Publisher Copyright: © 2019 by the authors. Licensee MDPI, Basel, Switzerland.

PY - 2019/3

Y1 - 2019/3

N2 - The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.

AB - The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.

KW - CPS testbed

KW - Cyber-physical system

KW - Digital substation

KW - IEC 61850

KW - IEC 62351-7

KW - Network management system

UR - http://www.scopus.com/inward/record.url?scp=85064036195&partnerID=8YFLogxK

U2 - 10.3390/electronics8030326

DO - 10.3390/electronics8030326

M3 - Article

AN - SCOPUS:85064036195

SN - 2079-9292

VL - 8

JO - Electronics (Switzerland)

JF - Electronics (Switzerland)

IS - 3

M1 - 326

ER -

Behavior analysis and anomaly detection for a digital substation on cyber-physical system

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this