Abstract:High-precision time synchronization is a vital prerequisite for many modern applications and technologies, including Smart Grids, Time-Sensitive Networking (TSN), and 5G networks. Although the Precision Time Protocol (PTP) can accomplish this requirement in trusted environments, it becomes unreliable in the presence of specific cyber attacks. Mainly, time delay attacks pose the highest threat to the protocol, enabling attackers to diverge targeted clocks undetected. With the increasing danger of cyber attacks, especially against critical infrastructure, there is a great demand for effective countermeasures to secure both time synchronization and the applications that depend on it. However, current solutions are not sufficiently capable of mitigating sophisticated delay attacks. For example, they lack proper integration into the PTP protocol, scalability, or sound evaluation with the required microsecond-level accuracy. This work proposes an approach to detect and counteract delay attacks against PTP based on cyclic path asymmetry measurements over redundant paths. For that, we provide a method to find redundant paths in arbitrary networks and show how this redundancy can be exploited to reveal and mitigate undesirable asymmetries on the synchronization path that cause the malicious clock divergence. Furthermore, we propose PTPsec, a secure PTP protocol and its implementation based on the latest IEEE 1588-2019 standard. With PTPsec, we advance the conventional PTP to support reliable delay attack detection and mitigation. We validate our approach on a hardware testbed, which includes an attacker capable of performing static and incremental delay attacks at a microsecond precision. Our experimental results show that all attack scenarios can be reliably detected and mitigated with minimal detection time.

Network Topology-aware Mitigation of Undetectable PMU Time Synchronization Attacks

Undetectable GPS-Spoofing Attack on Time Series Phasor Measurement Unit Data

An Extension to the Precision Time Protocol (PTP) to Enable the Detection of Cyber Attacks

On Optimal PMU Placement-Based Defense Against Data Integrity Attacks in Smart Grid.

Time Synchronization Attack in Smart Grid-Part II: Cross Layer Detection Mechanism

On time desynchronization attack against IEEE 1588 protocol in power grid systems

Securing the grid: A comprehensive analysis of cybersecurity challenges in PMU-based cyber-physical power networks

Detecting Stealthy Attacks in Power Systems based on Switching and Zonotopes

Towards Optimal PMU Placement Against Data Integrity Attacks in Smart Grid.

Defending Against Adversarial Attacks in Transmission- and Distribution-level PMU Data

A Double-Benefit Moving Target Defense Against Cyber–Physical Attacks in Smart Grid

Distributed detection and isolation of topology attacks in power networks

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

Moving-Target Defense for Detecting Coordinated Cyber-Physical Attacks in Power Grids

PMU Placement in Electric Transmission Networks for Reliable State Estimation Against False Data Injection Attacks

Cyber attacks on PMU placement in a smart grid: Characterization and optimization

Cyber security assessment in PMU-based state estimation of smart electric transmission networks

PTPsec: Securing the Precision Time Protocol Against Time Delay Attacks Using Cyclic Path Asymmetry Analysis

Impacts of Bad Data on the PMU Based Line Outage Detection

Analyzing Locally Coordinated Cyber-Physical Attacks for Undetectable Line Outages.

A Remedy to Losing Time Synchronization at D-PMUs, H-PMUs, and WMUs in Event Location Identification in Power Distribution Systems