Analysis of Cryptographic Algorithms to Improve Cybersecurity in the Industrial Electrical Sector
Source abstract
Abstract
This article provides a general overview of the communication protocols used in the IEC61850 standard for the automation of electrical substations. Specifically, it examines the GOOSE and R-GOOSE protocols, which are used for exchanging various types of information. The article then presents real cases of cyber attacks on the industrial sector, highlighting the importance of addressing cybersecurity in the IEC61850 standard. The text presents security drawbacks of the communication protocols mentioned earlier and briefly explains two algorithms defined in the IEC61850 standard to address them. However, the authors suggest that having only a couple of algorithms may not be sufficient to ensure digital security in substations. This article presents a study on the cryptographic algorithms ChaCha20 and Poly1305. The purpose of the study is to experimentally verify their adaptation to the strict time requirements that GOOSE must meet for their operation. These algorithms can operate independently or in combination, creating an Authenticated Encryption with Associated Data (AEAD) algorithm. Both algorithms were thoroughly reviewed and tested using GOOSE and R-GOOSE frames generated by the S-GoSV software. The computational time required was also observed. The frames were analysed using the Wireshark software. It was concluded that the algorithms are suitable for the communication requirements of electrical substations and can be used as an alternative to the cryptographic algorithms proposed under the IEC61850 standard.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Smart Grid Security and Resilience · Cryptographic Implementations and Security · Physical Unclonable Functions (PUFs) and Hardware Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Departamento de Informática y Automática, Universidad Nacional de Educación a Distancia, 28040 Madrid, Spain
Escuela de Ingeniería Eléctrica, Pontificia Universidad Católica de Valparaíso, Valparaíso 2362804, Chile
Funding
Ministry of Science and Innovation of Spain
References (35)
Show source-provided references
1. Smart Grid Technologies: Communication Technologies and Standards10.1109/TII.2011.2166794 ↗
2. Song, Y., FitzPatrick, G., Lee, K., and Zhang, Y. (2017, January 23–26). Interoperability Test for IEC 61850-9-2 Standard-based Merging Units. Proceedings of the 2017 IEEE Power & Energy Society Innovative Smart Grid Technologies Conference (ISGT), Washington, DC, USA.10.1109/ISGT.2017.8086084 ↗
3. Yegorov, P.K., Lackovitch, A., Dean, E., Mustafa, H.M., Basumallik, S., and Srivastava, A. (2023, January 15–17). Analyzing GOOSE Security in IEC61850-based Substation Using ML, SDN and Digital Twin. Proceedings of the 2023 North American Power Symposium (NAPS), Asheville, NC, USA.10.1109/NAPS58826.2023.10318551 ↗
4. IEEE 1609 WAVE and IEC 61850 Standard Communication Based Integrated EV Charging Management in Smart Grids10.1109/TVT.2018.2838018 ↗
5. Farooq, S.M., Hussain, S.S., and Ustun, T.S. (2019). S-GoSV: Framework for Generating Secure IEC 61850 GOOSE and Sample Value Messages. Energies, 12.10.3390/en12132536 ↗
6. Kush, N., Ahmed, E., Branagan, M., and Foo, E. (2014, January 20–23). Poisoned GOOSE: Exploiting the GOOSE protocol. Proceedings of the Twelfth Australasian Information Security Conference, AISC’14, Auckland, New Zealand.
7. A Mathematical Modeling of Stuxnet-Style Autonomous Vehicle Malware10.1109/TITS.2022.3213771 ↗
8. UCA International Users Group (2024, February 02). WG15 Public Site. Available online: http://iectc57.ucaiug.org/wg15public.
9. A Novel Approach for Mitigation of Replay and Masquerade Attacks in Smartgrids Using IEC 61850 Standard10.1109/ACCESS.2019.2948117 ↗
10. A Review of IEC 62351 Security Mechanisms for IEC 61850 Message Exchanges10.1109/TII.2019.2956734 ↗
11. Implementation of Secure Sampled Value (SeSV) Messages in Substation Automation System10.1109/TPWRD.2021.3061205 ↗
12. Da Silveira, M.G., and Franco, P.H. (2019, January 20–22). IEC 61850 network cybersecurity: Mitigating GOOSE message vulnerabilities. Proceedings of the 6th Annual PAC World Americas Conference, Raleigh, NC, USA.
13. Interpreting and Implementing IEC 61850-90-5 Routed-Sampled Value and Routed-GOOSE Protocols for IEEE C37.118.2 Compliant Wide-Area Synchrophasor Data Transfer10.1016/j.epsr.2016.12.006 ↗
14. Hariri, M.E., Youssef, T., Harmon, E., Habib, H., and Mohammed, O. (2019, January 11–14). The IEC 61850 Sampled Measured Values Protocol: Analysis, Threat Identification, and Feasibility of Using NN Forecasters to Detect of Spoofed Packets. Proceedings of the 2019 IEEE International Conference on Environment and Electrical Engineering and 2019 IEEE Industrial and Commercial Power Systems Europe (EEEIC/I&CPS Europe), Genova, Italy.10.1109/EEEIC.2019.8783253 ↗
15. Falk, H., Adamiak, M.G., Baigent, D., and Madani, V. (2013, January 8–11). An overview of the new IEC 61850 synchrophasor publish-subscribe profile. Proceedings of the 2013 66th Annual Conference for Protective Relay Engineers, College Station, TX, USA.10.1109/CPRE.2013.6822046 ↗
16. Kaura, C., Sindhwani, N., and Chaudhary, A. (2022, January 10–11). Analysing the Impact of Cyber-Threat to ICS and SCADA Systems. Proceedings of the 2022 International Mobile and Embedded Technology Conference (MECON), Noida, India.10.1109/MECON53876.2022.9752425 ↗
17. Geiger, M., Bauer, J., Masuch, M., and Franke, J. (2020, January 8–11). An Analysis of Black Energy 3, Crashoverride, and Trisis, Three Malware Approaches Targeting Operational Technology Systems. Proceedings of the 2020 25th IEEE International Conference on Emerging Technologies and Factory Automation (ETFA), Vienna, Austria.10.1109/ETFA46521.2020.9212128 ↗
18. Slowik, J. (2024, March 05). Anatomy of an Attack: Detecting and Defeating Crashoverride. Available online: https://www.virusbulletin.com/uploads/pdf/magazine/2018/VB2018-Slowik.pdf.
19. Hassankashi, M. (2023, February 03). Security on the Web by Advanced Encryption Standard (AES) and Security Assertion Markup Language (SAML)—codeproject.com. Available online: https://www.codeproject.com/Articles/1023379/Security-On-The-Web-By-Advanced-Encryption-Standar.
20. Advanced encryption standard (AES) algorithm to encrypt and decrypt data
21. Vadaviya, D., and Tandel, P. (2015, January 29). Study of avalanche effect in AES. Proceedings of the National Conference on Recent Advances in Engineering for Sustainability, Surat, India.
22. Gürkaynak, F.K. (2006). GALS System Design: Side Channel Attack Secure Cryptographic Accelerators. [Ph.D. Thesis, ETH Zurich].
23. Park, B., Song, J., and Seo, S.C. (2020). Efficient Implementation of a Crypto Library Using Web Assembly. Electronics, 9.10.3390/electronics9111839 ↗
24. Analysis and Implementation of Message Authentication Code (MAC) Algorithms for GOOSE Message Security10.1109/ACCESS.2019.2923728 ↗
25. A lightweight security scheme for advanced metering infrastructures in smart grid10.11591/eei.v9i2.2086 ↗
26. (2024, January 14). @RustCryptoOrg. chacha20 v0.9.1. Available online: https://crates.io/crates/chacha20.
27. Nir, Y., and Langley, A. (2024, February 20). ChaCha20 and Poly1305 for IETF Protocols. RFC 84392018. Available online: https://doi.org/10.17487/RFC8439.10.17487/RFC8439 ↗
28. Kueltz, A. (2023, December 15). GitHub Repository RFC7539 v2.0.1. Available online: https://github.com/AntonKueltz/rfc7539.
29. Roa, O., Botero, J.F., Gutierrez-Betancur, S.A., and Tobar-Rosero, O.A. (2023, January 15–17). GOOSEAttacker: Synthetic Attack Generation Tool for IEC61850. Proceedings of the 2023 IEEE Latin-American Conference on Communications (LATINCOM), Panama City, Panama.10.1109/LATINCOM59467.2023.10361897 ↗
30. A Method for Achieving Confidentiality and Integrity in IEC 61850 GOOSE Messages10.1109/TPWRD.2020.2990760 ↗
31. Implementing Secure Routable GOOSE and SV Messages Based on IEC 61850-90-510.1109/ACCESS.2020.2971011 ↗
32. Alonso, F., and Samaniego, B. (2024, February 20). GitHub Repository. Available online: https://github.com/Pancho41y/Chacha20-Poly1305.
33. Sullivan, N. (2023, December 10). Do the ChaCha: Better Mobile Performance with Cryptography-blog.cloudflare.com. Available online: https://blog.cloudflare.com/do-the-chacha-better-mobile-performance-with-cryptography/.
34. Sönmez, B., Sarıkaya, A.A., and Bahtiyar, S. (2019, January 11–15). Machine Learning-Based Side Channel Selection for Time-Driven Cache Attacks on AES. Proceedings of the 2019 4th International Conference on Computer Science and Engineering (UBMK), Samsun, Turkey.10.1109/UBMK.2019.8907211 ↗
35. Mushtaq, M., Akram, A., Bhatti, M.K., Rais, R.N.B., Lapotre, V., and Gogniat, G. (2018, January 23–24). Run-time Detection of Prime + Probe Side-Channel Attack on AES Encryption Algorithm. Proceedings of the 2018 Global Information Infrastructure and Networking Symposium (GIIS), Thessaloniki, Greece.10.1109/GIIS.2018.8635767 ↗