Vulnerability and Impact Analysis of the IEC 61850 GOOSE Protocol in the Smart Grid

Sensors

Nahina Islam¹  Biplob Ray¹  HaftuTasew Reda²  Abdun Mahmood²  Akhtar Kalam³  Pejman Peidaee³  Adnan Anwar⁴ 

[1] Centre for Intelligent Systems (CIS), School of Engineering and Technology, CQ University, Rockhampton 4700, Australia;Department of Computer Science and IT, La Trobe University, Plenty Rd., Bundoora 3086, Australia;Department of Electrical and Electronics Engineering, Victoria University, Ballarat Rd., Footscray 3011, Australia;School of IT, Deakin University, 75 Pigdons Rd, Waurn Ponds 3216, Australia;

关键词: smart grid;    cybersecurity;    substation protection;    IEC 61850;    GOOSE protocol;    publish-subscribe communication;   

DOI  :  10.3390/s21041554

来源: DOAJ

【 摘 要 】

IEC 61850 is one of the most prominent communication standards adopted by the smart grid community due to its high scalability, multi-vendor interoperability, and support for several input/output devices. Generic Object-Oriented Substation Events (GOOSE), which is a widely used communication protocol defined in IEC 61850, provides reliable and fast transmission of events for the electrical substation system. This paper investigates the security vulnerabilities of this protocol and analyzes the potential impact on the smart grid by rigorously analyzing the security of the GOOSE protocol using an automated process and identifying vulnerabilities in the context of smart grid communication. The vulnerabilities are tested using a real-time simulation and industry standard hardware-in-the-loop emulation. An in-depth experimental analysis is performed to demonstrate and verify the security weakness of the GOOSE publish-subscribe protocol towards the substation protection within the smart grid setup. It is observed that an adversary who might have familiarity with the substation network architecture can create falsified attack scenarios that can affect the physical operation of the power system. Extensive experiments using the real-time testbed validate the theoretical analysis, and the obtained experimental results prove that the GOOSE-based IEC 61850 compliant substation system is vulnerable to attacks from malicious intruders.

【 授权许可】

Unknown