Evaluation of the Cyber Security Provision System for Critical Infrastructure

• Autorzy: Jarmakiewicz J. , Maślanka K. , Parobczak K.
• Języki publikacji: EN

Abstrakty

EN

The paper presents an assessment of the functional mechanisms that are part of the security system for the power grid control. The security system, its components, and the real time processes for the control of electricity supply were defined. In particular, SCADA protocols used in the control system and mechanisms for transferring them between the control center and actuators were identified. The paper also includes presentation of a test environment that is used for developed security mechanisms evaluation. In the last fragment of the paper, the test scenarios were formulated and the results obtained in the cyber security system were shown, which cover security probes reaction delay, forged malicious IEC 60870-5-104 traffic detection, DarkNet and HoneyPot interception of adversary actions, and dynamic firewall rules creation.

Słowa kluczowe

EN

critical infrastructure; cyber security system; power system security; SCADA system

• Wydawca: Instytut Łączności - Państwowy Instytut Badawczy
• Czasopismo: Journal of Telecommunications and Information Technology
• Rocznik: 2015
• Tom: nr 4
• Strony: 22--29
• Opis fizyczny: Bibliogr. 20 poz., rys., tab.

Twórcy

autor

Jarmakiewicz J.

• Faculty of Electronics, Military University of Technology, Warsaw, Poland

autor

Maślanka K.

• Faculty of Electronics, Military University of Technology, Warsaw, Poland

autor

Parobczak K.

• Faculty of Electronics, Military University of Technology, Warsaw, Poland

Bibliografia

• [1] "Wymogi wobec JWCD na potrzeby wdrażania systemu LFC (Requirements toward power sources for implementation of the LFC system)", PSE Operator S.A., 2011 (in Polish).
• [2] "Vulnerability Analysis of Energy Delivery Control Systems", Idaho National Laboratory, Idaho Falls, Idaho, USA, Sept. 2011.
• [3] G. Giannopoulos, R. Filippini, and M. Schimmer, "Risk assessment methodologies for Critical Infrastructure Protection", JRC Technical Notes, European Commission, Joint Research Centre Institute for the Protection and Security of the Citizen, 2012.
• [4] "National SCADA test bed", U.S. Department of Energy [Online]. Available: http://energy.gov/oe/technology-development/energy-delivery-systems-cybersecurity/national-scada-test-bed
• [5] "About the Cybersecurity for Energy Delivery Systems Program", Office of Electricity Delivery & Energy Reliability [Online]. Available: http://energy.gov/oe/services/technology-development/energydelivery-systems-cybersecurity
• [6] D. Kuipers, "Idaho National Laboratory National SCADA Test Bed", Idaho Falls, IO, USA, Oct. 2010 [Online]. Available: http://www.inl.gov
• [7] "Common Cyber Security Vulnerabilities Observed in Control System Assessments by the INL NSTB Program", U.S. Department of Energy Office of Electricity Delivery and Energy Reliability, Idaho National Laboratory, Nov. 2008.
• [8] J. Jarmakiewicz, K. Maślanka, K. Parobczak, "Development of cyber security testbed for critical infrastructure", in Int. Conf. Milit. Commun. and Inform. Syst. ICMCIS 2015, Cracow, Poland, 2015.
• [9] Critical Infrastructure Protection, E. Goetz and S. Shenoi, Eds., IFIP Advances in Information and Communication Technology, vol. 253. Springer, 2008.
• [10] SCADA LAB Project Homepage, https://www.scadalab.eu, Sept. 2012{2014 by INTECO, The Innovative Business Association for Network Security and Information Systems (AEI), Everis Consultancy Ltd, The National Centre for Critical Infrastructure Protection (CNPIC), EFB, Telvent Energia S.A., C Global Services (CGS), Zanasi and Partners (Z&P) and Nisz.
• [11] M. Rybnicek, R. Poisel, M. Ruzicka, and S. Tjoa, "A generic approach to critical infrastructures modeling and simulation", in Proc. Int. Conf. Cyber Secur. CYBERSECURITY 2012, Washington, DC, USA, 2012, pp. 144{151.
• [12] S. Walsh, S. Cherry, and L. Roybal, "Critical Infrastructure Modeling An Approach to Characterizing Interdependencies of Complex Networks", in Proc. 2nd Int. Conf. Human Syst. Interact. HSI'09, Catania, Italy, 2009.
• [13] 1516-2010 - IEEE Standard for Modeling and Simulation (M&S) High Level Architecture (HLA) { Framework and Rules, IEEE Standard Association, Aug. 2010.
• [14] "Informacje o pracy KSE (Information on KSE production resources)" (as of 01.12.2014), PSE Operator S.A. (in Polish).
• [15] "Standard architektury sieci IP na stacjach elektroenergetycznych PSE S.A (IP Network Standard Architecture for Energetic Station in PSE)", standard tech. specif. PSE PSE-SF.LAN IP SE/2014v1, Konstancin-Jeziorna, Poland, 2014 (in Polish).
• [16] Configuring Virtual Routing and Forwarding [Online]. Available: http://www.cisco.com
• [17] Communication controller Ex-mBEL COM [Online]. Available: http://www.elkomtech.com.pl/produkty/p/ex-mbel-comkoncentrator-danych/ko/1/3.html (retrieved 12.01.2014).
• [18] Communication controller Ex-mBEL [Online]. Available: http://www.elkomtech.com.pl/produkty/g/ex-mbel-1/ko/1/2.html
• [19] LabVIEW System Design Software [Online]. Available: http://www.ni.com/labview/ (retrieved 12.01.2014).
• [20] Wireshark tool for IEC61850 (8-1, 9-2, 90-5, GOOSE), IEC60870-6 TASE.2(ICCP), UEEE C37.118 and MMS [Online]. Available: http://www.sisconet.com/downloads/Wireshark-win32-1.11.3-SkunkWorksIEC61850.exe