journal article·2024Open access

Fortifying Smart Grids: A Holistic Assessment Strategy against Cyber Attacks and Physical Threats for Intelligent Electronic Devices

Yangrong Chen, June Li, Yu Xia, Ruiwen Zhang, Lingling Li, Xiaoyu Li, Lin Ge

Computers, Materials & Continua· Volume 80· Issue 2

Abstract

Intelligent electronic devices (IEDs) are interconnected via communication networks and play pivotal roles in transmitting grid-related operational data and executing control instructions. In the context of the heightened security challenges within smart grids, IEDs pose significant risks due to inherent hardware and software vulnerabilities, as well as the openness and vulnerability of communication protocols. Smart grid security, distinct from traditional internet security, mainly relies on monitoring network security events at the platform layer, lacking an effective assessment mechanism for IEDs. Hence, we incorporate considerations for both cyber-attacks and physical faults, presenting security assessment indicators and methods specifically tailored for IEDs. Initially, we outline the security monitoring technology for IEDs, considering the necessary data sources for their security assessment. Subsequently, we classify IEDs and establish a comprehensive security monitoring index system, incorporating factors such as running states, network traffic, and abnormal behaviors. This index system contains 18 indicators in 3 categories. Additionally, we elucidate quantitative methods for various indicators and propose a hybrid security assessment method known as GRCW-hybrid, combining grey relational analysis (GRA), analytic hierarchy process (AHP), and entropy weight method (EWM). According to the proposed assessment method, the security risk level of IEDs can be graded into 6 levels, namely 0, 1, 2, 3, 4, and 5. The higher the level, the greater the security risk. Finally, we assess and simulate 15 scenarios in 3 categories, which are based on monitoring indicators and real-world situations encountered by IEDs. The results show that calculated security risk level based on the proposed assessment method are consistent with actual simulation. Thus, the reasonableness and effectiveness of the proposed index system and assessment method are validated.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Smart Grid Security and Resilience · Information and Cyber Security · Network Security and Intrusion Detection

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (50)

Show source-provided references
1. Intelligent electronic devices with collaborative intrusion detection systems10.1109/TSG.2017.2737826 ↗
2. Intelligent electronic devices (IEDs)
3. Industrial control systems: Cyberattack trends and countermeasures10.1016/j.comcom.2020.03.007 ↗
4. Intrusion detection techniques for industrial control systems
5. Type and verification of network attacks on embedded terminals of intelligent substation
6. Summary of security technology and application in industrial control system
7. Using power side-channel to implement anomaly-based intrusion detection on smart grid terminals
8. Remote attestation for intelligent electronic devices in smart grid based on trusted level measurement10.1049/2020.02.019 ↗
9. Risk assessment and defense resource allocation of cyber-physical distribution system under denial of service attack
10. A self-healing architecture for power industrial control systems against security threats to embedded terminals
11. Cyber-power system security in a smart grid environment
12. The importance of testing Smart Grid IEDs against security vulnerabilities
13. Multi-source fusion-based security detection method for heterogeneous networks10.1016/j.cose.2018.01.003 ↗
14. Comprehensive security assessment for a cyber physical energy system: A lesson from Ukraine’s blackout
15. Real-time false data injection attack detection in energy internet using online robust principal component analysis
16. Discussion on megalopolis power grid safety from the perspective of Venezuelan blackout
17. Analysis on network information security protection technology of intelligent terminal power monitoring system of substation under the support of multimodal multimedia information
18. Research on terminal security protection of zero-trust smart grid based on fog computing
19. Cyber-attacks related to intelligent electronic devices and their countermeasures: A review
20. Reliability evaluation of power grids considering integrity attacks against substation protective IEDs10.1109/TII.2019.2926557 ↗
21. A novel approach for mitigation of replay and masquerade attacks in smart grids using IEC 61850 standard10.1109/ACCESS.2019.2948117 ↗
22. Cyber inference system for substation anomalies against alter-and-hide attacks
23. Model for power smart terminal security assessment
24. Security situation assessment of intelligent distribution transformer terminal unit based on information entropy
25. An anomaly detection algorithm for the power industrial terminal security monitoring
26. Research framework of cyber-security protection technologies for smart terminals in power system
27. Research on cyber security defense technology of power generation acquisition terminal in new energy plant
28. Research on impact assessment of attacks on power terminals
29. Security assessment of intelligent distribution transformer terminal unit based on RBF-SVM
30. Research on power terminal security monitoring method based on business logic consistency
31. Intelligent terminal security technology of power grid sensing layer based upon information entropy data mining
32. Adequacy evaluation of electric power grids considering substation cyber vulnerabilities10.1016/j.ijepes.2017.10.004 ↗
33. Real time monitoring simulation of abnormal state of large data in smart grid
34. Quantitative vulnerability assessment of cyber security for distribution automation systems10.3390/en8065266 ↗
35. Combination of D-AHP and grey theory for the assessment of the information security risks of smart grids
36. Assessment of cyber security risks: A smart terminal process
37. Dentification of abnormal behavior in industrial network based on semantic vector and OCSVM
38. Multidimensional intrusion detection system for IEC 61850-based SCADA networks10.1109/TPWRD.2016.2603339 ↗
39. Novel approach for detecting network anomalies for substation automation based on IEC 6185010.1007/s11042-014-1870-0 ↗
40. THREATRACE: Detecting and tracing host-based threats in node level through provenance graph learning10.1109/TIFS.2022.3208815 ↗
41. A systematic literature review on host-based intrusion detection systems10.1109/ACCESS.2024.3367004 ↗
42. Research trends in network-based intrusion detection systems: A review10.1109/ACCESS.2021.3129775 ↗
43. Machine learning-powered encrypted network traffic analysis: A comprehensive survey10.1109/COMST.2022.3208196 ↗
44. MARS: Automated protocol analysis framework for internet of things10.1109/JIOT.2022.3160296 ↗
45. Review of K-means clustering algorithm
46. Malicious code detection based on random forest
47. Grey control system10.1016/S0167-6911(82)80025-X ↗
48. Short-term power load forecasting based on grey relational analysis and support vector machine
49. Research on situation assessment of active distribution networks considering cyberattacks
50. Reliability evaluation method for smart substation based on cyber-physical fusion