Abstract:The measurement of security is essential for defending critical infrastructures such as smart grid substations against emerging threats of supply chain attacks. However, security measurement in general is still in its infancy and especially lacks tool support. In particular, supply chain attacks exploit vulnerabilities injected into devices before their shipment or during firmware updates and represent a significant security threat to substations. Preventing such attacks through the naïve solution of purchasing devices only from trusted vendors may not always be feasible (e.g., due to operational constraints of an operator being bound to particular vendors). Furthermore, in many cases, the effectiveness of applying ad hoc hardening options can be limited, while it may not be feasible to deploy all possible security mechanisms due to budget constraints. Finally, manually assessing and applying different hardening options while respecting a given budget is usually very challenging for system operators and can be prone to human error. In this article, we develop a hardening system, namely, hardening framework for substations (HFS), to measure and optimally improve the security posture of substations against supply chain attacks. First, HFS provides a hardening mechanism for securing substations while considering the budget and operational constraints. Second, HFS provides a visual framework that allows operators to generate attack graphs and manually experiment with various hardening options. We validate the effectiveness of HFS based on several scenarios, including the case in which supply chain attacks are mitigated by fixing nonsupply chain vulnerabilities. Our simulation results demonstrate that HFS improves the security postures of substations against supply chain attacks even with limited supply chain-related hardening options by reducing the number of successful supply chain attackers. Finally, we discuss how our work may be improved through leveraging existing concepts and techniques from instrumentation and measurement.

A novel hybrid methodology to secure GOOSE messages against cyberattacks in smart grids

A Geometrical Approach to Enhance Security Against Cyber Attacks in Digital Substations

SDN-Based Dynamic Cybersecurity Framework of IEC-61850 Communications in Smart Grid

Denial-of-Service Attack on IEC 61850-Based Substation Automation System: A Crucial Cyber Threat towards Smart Substation Pathways

Early Attack Detection for Securing GOOSE Network Traffic

A Name-Based Secure Communication Mechanism for Smart Grid Employing Wireless Networks.

GOOSE Secure: A Comprehensive Dataset for In-Depth Analysis of GOOSE Spoofing Attacks in Digital Substations

An Approach of Replicating Multi-Staged Cyber-Attacks and Countermeasures in a Smart Grid Co-Simulation Environment

SDN-Based Smart Cyber Switching (SCS) for Cyber Restoration of a Digital Substation

Demo Abstract: A HIL Emulator-Based Cyber Security Testbed for DC Microgrids

Digital Substation Cyber Security Analysis with Syn-Flood Attack As A Simulation Case

ChatGPT and Other Large Language Models for Cybersecurity of Smart Grid Applications

Cybersecurity Deployment in Smart Grids: Critical Review, Applications, Protection, and Challenges

Cybersecurity Test-Bed for IEC 61850 Based Smart Substations

Measuring and Improving the Security Posture of IEC 61850 Substations Against Supply Chain Attacks

A Novel Generative AI-Based Framework for Anomaly Detection in Multicast Messages in Smart Grid Communications

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Implementation of a Trust-Based Framework for Substation Defense in the Smart Grid

A Verifiable Framework for Cyber-Physical Attacks and Countermeasures in a Resilient Electric Power Grid

Emulation of Digital Substations Communication for Cyber Security Awareness

CyberGrid: an IEC61850 protocol-based substation automation virtual cyber range for cybersecurity research in the smart grid