Abstract:Substation communication network (SCN) provides real-time, high-speed, and reliable data transmissions for the advanced monitoring and control functionalities, which are facing increasing cyberspace threats and attacks. Efficient threat perception and cyber situational awareness are essential to enhance secure and reliable SCN operations. This article explores multiscale SCN traffic pattern characteristics with holistic network traffic, separated network traffic for included devices (especially IoT devices) and separated network traffic of certain types of protocol. The proposed online traffic-oriented SCN traffic anomaly detection and cyber situational awareness models are designed for the network anomalies and cyber-attacks that could cause network traffic pattern variations. We leverage a fractional autoregressive integration moving average (FARIMA)-based dynamic threshold model to detect abnormal traffic patterns without sophisticated computations or deep packet inspection. The SCN real-time operation conditions are timely quantified through the statistical methods with the alliance of SCN topology and protocols. The cyber situational awareness model is further carried out to evaluate the most affected protocol and security risks of various devices in SCN using Grubbs' test. The experiment results are carried out based on a real 110-kV intelligent power substation. The numerical results confirm the comparative low mean square error (MSE) and low complexity of the online traffic characterization when forecasting holistic network traffic and separated network traffics. Furthermore, the timely and quantified cybersecurity risk analysis is conducted based on the SCN traffic with varying scales to detect cyberspace threats and identify the high-risk SCN devices and the most affected protocol.

S-SCDN Concept and Its Situation Awareness Visualization Application Scenario Analysis

Research and Development of Comprehensive Monitoring and Management Platform for Substation

Situation Awareness of Active Distribution Network: Roadmap, Technologies, and Bottlenecks

A study on monitoring technology for multi-terminal ±500kV VSC-HVDC power transmission system

Design and Realization of Substation-Control Center Two Level Distributed Alarming System

Application Research of Multi-site Smart Substation Based on Digital and Physical Simulation Technology.

Substation-Control Center Two-level Distributed Network Modeling

Identifications of Feeder Clusters and Generic Switching Station Types for Urban S-SCDN Based on Graph Calculation

Distribution Network Advanced Application Software and Its Key Techniques

Integrated System with Intelligent Monitoring Management and Remote Metering for Power Distribution Network

Smart substation advanced application software adapted for two level distributed smart dispatch and control

Study and Design of Online Distributed Modeling System for China Southern Power Grid

Research and Application of Integrated System Design of Smart Substation Secondary System Based on SCD/CAD File Mapping Technology

On the Modeling and Analysis of Communication Traffic in Intelligent Electric Power Substations

Research and Application of Intelligent Distribution Network Operation Simulation Platform Contains the Source and Network

Design of Distribution Automation Master Station System Integration Scheme Based on “n + 1” Architecture

A Two-Level Distributed Approachto Power Network Modeling

Multi-Scale Traffic Aware Cybersecurity Situational Awareness Online Model for Intelligent Power Substation Communication Network

Data-driven Distributed Analytics and Control Platform for Smart Grid Situational Awareness

Feasibility Study On Online Dsa Through Distributed Time Domain Simulations In Wan

Research on Real-time Automatic Acquisition Technology of Topology Data in Distribution Network