Behavior analysis and anomaly detection for a digital substation on cyber-physical system

Yoojin Kwon, Sangyoum Lee, Ralph King, Jong In Lim, Huy Kang Kim

Research output: Contribution to journalArticle

Abstract

The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.

Original languageEnglish
Article number326
JournalElectronics (Switzerland)
Volume8
Issue number3
DOIs
Publication statusPublished - 2019 Mar 1

Fingerprint

Testbeds
Information technology
Transmission control protocol
Internet protocols
Electric power systems
Ethernet
Communication systems
Statistics
Communication
Cyber Physical System

Keywords

  • CPS testbed
  • Cyber-physical system
  • Digital substation
  • IEC 61850
  • IEC 62351-7
  • Network management system

ASJC Scopus subject areas

  • Control and Systems Engineering
  • Signal Processing
  • Hardware and Architecture
  • Computer Networks and Communications
  • Electrical and Electronic Engineering

Cite this

Behavior analysis and anomaly detection for a digital substation on cyber-physical system. / Kwon, Yoojin; Lee, Sangyoum; King, Ralph; Lim, Jong In; Kim, Huy Kang.

In: Electronics (Switzerland), Vol. 8, No. 3, 326, 01.03.2019.

Research output: Contribution to journalArticle

@article{30cbb4f13eb54c2083864d13483444b7,
title = "Behavior analysis and anomaly detection for a digital substation on cyber-physical system",
abstract = "The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.",
keywords = "CPS testbed, Cyber-physical system, Digital substation, IEC 61850, IEC 62351-7, Network management system",
author = "Yoojin Kwon and Sangyoum Lee and Ralph King and Lim, {Jong In} and Kim, {Huy Kang}",
year = "2019",
month = "3",
day = "1",
doi = "10.3390/electronics8030326",
language = "English",
volume = "8",
journal = "Electronics (Switzerland)",
issn = "2079-9292",
publisher = "Multidisciplinary Digital Publishing Institute (MDPI)",
number = "3",

}

TY - JOUR

T1 - Behavior analysis and anomaly detection for a digital substation on cyber-physical system

AU - Kwon, Yoojin

AU - Lee, Sangyoum

AU - King, Ralph

AU - Lim, Jong In

AU - Kim, Huy Kang

PY - 2019/3/1

Y1 - 2019/3/1

N2 - The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.

AB - The electric power system infrastructure has begun to adopt digital information technologies such as transmission control protocol/internet protocol (TCP/IP) and Ethernet infrastructures. With this adoption, information technology-centric network and system management (NSM) tools are used to manage the intermediate communication systems and electric devices in digital substations. However, the technology to monitor the cyber–physical System (CPS) statistics for the intelligent electronic devices (IEDs) and serial communication for a digital substation does not exist yet. In this paper, we aim to propose cyber-physical analysis methodologies of a digital substation system, concerning issues of (1) International Electrotechnical Commission (IEC) 62351-7 based network and system management, (2) behavior analysis of the CPS, (3) cyber–physical anomaly detection systems, and (4) a testbed for a digital substation. By collaborating with Electric Power Research Institute (EPRI), a cyber security testbed for the digital substation has been developed to implement the use cases and analyze potential security threats. Newly integrated methodologies for information handling are expected to lead to improved safety and reliability for the CPS of electric power grid systems.

KW - CPS testbed

KW - Cyber-physical system

KW - Digital substation

KW - IEC 61850

KW - IEC 62351-7

KW - Network management system

UR - http://www.scopus.com/inward/record.url?scp=85064036195&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85064036195&partnerID=8YFLogxK

U2 - 10.3390/electronics8030326

DO - 10.3390/electronics8030326

M3 - Article

AN - SCOPUS:85064036195

VL - 8

JO - Electronics (Switzerland)

JF - Electronics (Switzerland)

SN - 2079-9292

IS - 3

M1 - 326

ER -