Investigation of Cyber-Attack Methods and Measures in Smart Grids

Smart grids have been developing rapidly with the development of technologies in recent years. In the field of critical infrastructures such as natural gas, electricity, water, and energy systems, which are among the smart grids, its use has been increasing in Turkey and all over the world in recent years. With the increase in the use of smart grids, security problems have also gained importance. Cybersecurity attacks against these networks are increasing every year. In this research study, smart cities, smart networks, and the most common cybersecurity attack methods against these systems were investigated. The studies on security in smart grids in the last 10 years have been examined and presented in a table. As a result of these researches, cyber-attacks that are experienced and likely to occur in smart networks were determined. The 20 most used cyber-attack methods were analyzed. In addition, the measures that can be taken against cyber-attacks are analyzed in detail. In addition, in this article, studies on security problems in smart grids are examined and evaluated.

___

[1] İ. Avcı, C. Özarpa, M. A. Aydın, A Survey of International Security Standards for Smart Grids, Industrial Control System and Critical Infrastructure, 12th International Exergy, Energy and Environment Symposium (IEEES-12), December 20-24, Doha, Qatar, 2020.

[2] A. Caragliu, C. Del Bo and P. Nijkamp, Smart cities in Europe (2009), In 3rd Central European Conference in Regional Science, 2009.

[3]Channelpostmea,http://www.channelpostmea.com/2017/03/02/dubai-wants-to-become-a-global-benchmark-for-smart-cities. Accessed Time: 02.03.2017.

[4] Z. Sang, Z. Luo, M. Mulquin, Standardization roadmap for smart sustainable cities. Technical report, International Telecommunication Union (ITU), 2015.

[5] M. Dönmez, Akıllı şebekeler ve entegrasyon (smart grids and integration), BTC Business Technology, 2013.

[6] Siemens Aktiengesellschaft, Smart grids and the new age of energy, http://www.energy.siemens.com/hq/de/stromuebertragung/transformatoren/assets/pdf/siemens-transformers-power-engineering-guide-7-1.pdf, 2014. Accessed Time:01.04.2021

[7] S. Borlase, Smart grids: infrastructure, technology, and solutions, CRC Press, 2016.

[8] Cisco Energy Optimization Service, http://www.cisco.com/web/strategy/docs/ energy/energy_optimization_service_aag.pdf, retrieved from CISCO, 2021. Accessed Time:07.05.2021.

[9] F. Feroze, N. Javaid, Towards Enhancing Demand Side Management using Evolutionary Techniques in Smart Grid. 10.13140/RG.2.2.34456.49920, 2017.

[10] S. Iyer, Cyber Security for Smart Grid, Cryptography, and Privacy, International Journal of Digital Multimedia Broadcasting, USA, 2011.

[11]Hacmageddon,https://www.hackmageddon.com/2018/04/17/16-31-march-2018-cyberattacks-timeline/. Accessed Time:: 21.03.2021.

[12] Y. Yan, et al., A Survey on Cyber Security for Smart Grid Communications, IEEE Communications Surveys & Tutorials, Vol. 14, No. 4, 2012.

[13] S. Goel, and A. Jindal, Evolving Cyber Security Challenges to the Smart Grid Landscape, International Journal of Advance Research, Ideas and Innovations in Technology, 2017.

[14] M. Yıldız, Siber Suçlar ve Kurum Güvenliği, Denizcilik Uzmanlık Tezi, T.C. Ulaştırma Denizcilik ve Haberleşme Bakanlığı, 2014.

[15] M. Kara, and S. Çelikkol, Kritik Altyapılar: Elektrik Üretim ve Dağıtım Sistemleri SCADA Güvenliği, 4. Ağ ve Bilgi Güvenliği Sempozyumu. Accessed Time:07.05.2021, 2011.

[16] E. Knapp, Industrial Network Security: Securing Critical Infrastructure Networks for Smart Grid, SCADA, and Other Industrial Control Systems, Elsevier Inc, 2011.

[17] M. Burmester and et al., Modeling security in cyber-physical systems, https://www.sciencedirect.com/science/journal/18745482, Pages 118-126, 2012.

[18] E. B. Rice, A. AlMajali, Mitigating the Risk of Cyber Attack On Smart Grid Systems, Science Direct, Elsevier, Procedia Computer Science 28, pp. 575 – 582, 2014.

[19] A. Ashok et al., Cyber-physical security of Wide-Area Monitoring, Protection and Control in a smart grid environment, Journal of Advanced Research, Cairo University, 2014.

[20] A. Anwar, A.N. Mahmood, Cybersecurity of smart grid infrastructure, The State of the Art in Intrusion Prevention and Detection, CRC Press, Taylor & Francis Group, USA, pp. 449-472, January 2014.

[21] T. Liu et al, Abnormal traffic-indexed state estimation: Acyber–physical fusion approach for Smart Grid attack detection, Elsevier, 2015.

[22] Suleiman, H. et al., Integrated smart grid systems security threat model, Elsevier, 2015.

[23] A. Arabo, Cyber Security Challenges within the Connected Home Ecosystem Futures, Procedia Computer Science, Volume 61, 2015, pp. 227-232, 2015.

[24] W. Knowles et al., 2015, A survey of cybersecurity management in industrial control systems, International Journal of Critical Infrastructure Protection Volume 9, p. 52-80, June 2015.

[25] R. Tawde et al., Cyber Security in Smart Grid SCADA Automation, IEEE Sponsored 2nd International Conference on Innovations in Information, Embedded, and Communication Systems (ICIIECS), 2015.

[26] Z. Drias et al., Analysis of Cyber Security for Industrial Control Systems, International Conference on Cyber Security of Smart Cities, Industrial Control System, and Communications (SSIC), 2015.

[27] Y. Cherdantseva et al., A review of cybersecurity risk assessment methods for SCADA systems, Computers & Security, Volume 56, February 2016, p.1-27, 2016.

[28] M. Wei, W. Wang, Data-centric threats and their impacts to real-time communications in smart grid, Computer Networks, Volume 104, p. 174-188, 2016.

[29] S. Mishra et al., Optimal packet scan against malicious attacks in smart grids, Theoretical Computer Science, Volume 609, Part 3, pp. 606-619, 2016.

[30] D. Young et al., A framework for incorporating insurance in critical infrastructure cyber risk strategies, International Journal of Critical Infrastructure Protection Volume 14, p. 43-57, 2016.

[31] M. Şenol, Siber Güçle Caydırıcılık Ama Nasıl?, Uluslararası Bilgi Güvenliği Mühendisliği Dergisi, Cilt:2, No:2, Ankara, pp.10-17, 2016.

[32] S. Borlase, Smart grids: infrastructure, technology, and solutions, 2017.

[33] X. Zhou et al., What should we do? A structured review of SCADA system cyber security standards, Proceedings of 2017 4th International Conference on Control, Decision and Information Technologies (CoDIT'17) , Barcelona, Spain, 2017.

[34] V. L. Do et al., Security of SCADA Systems Against Cyber-Physical Attacks, IEEE A&E System Magazine, 2017.

[35] M. M. Pour et al., A Review on Cyber Security Issues and Mitigation Methods in Smart Grid Systems, IEEE, 2017.

[36] S. D. Antón et al., Two Decades of SCADA Exploitation: A Brief History, IEEE Conference on Application, Information and Network Security (AINS), 2017.

[37] M. Kuzlu et al., A Comprehensive Review of Smart Grid Related Standards and Protocols, ICSG Istanbul, 2017.

[38] R. Deng et al., CCPA: Coordinated Cyber-Physical Attacks and Countermeasures in Smart Grid, IEEE Transactions on Smart Grid, Vol. 8, No. 5, 2017.

[39] M. U. Shaileshwari et al., Software Defined Networking for Smart Grid Communications and Security Challenges, ISGW 2017: Compendium of Technical Papers, p. 103-112, 2017.

[40] S. Nazir et al., Assessing and augmenting SCADA cybersecurity: A survey of techniques, Computers & Security Volume 70, September 2017, pp. 436-454, 2017.

[41] A. S. Bretas et al., Smart grids cyber-physical security as a malicious data attack: An innovation approach, Electric Power Systems Research, Volume 149, pp. 210-219, 2017.

[42] P. Eder-Neuhauser et al., Cyber-attack models for smart grid environments, Sustainable Energy, Grids and Networks Volume 12, p. 10-29, 2017.

[43] Z. A. Baig et al., Future challenges for smart cities: Cyber-security and digital forensics, Digital Investigation Volume 22, pp. 3-13, 2017.

[44] A. AlDairi, L. Tawalbeh, Cyber Security Attacks on Smart Cities and Associated Mobile Technologies, The International Workshop on Smart Cities Systems Engineering, Elsevier, 2017.

[45] A.O. Otuoze et al., Smart grids security challenges: Classification by sources of threats, Journal of Electrical Systems and Information Technology, 2018.

[46] L. A. Maglaras et al., Cybersecurity of critical infrastructures, ICT Express, Volume 4, Issue 1, 2018.

[47] X. Luo et al., Observer-based cyber-attack detection and isolation in smart grids, International Journal of Electrical Power & Energy Systems Volume 101, p. 127-138, 2018.

[48] D. Ding et al., A survey on security control and attack detection for industrial cyber-physical systems, Neurocomputing Volume 275, p. 1674-1683, 2018.

[49] S. Saini et al., Modelling for Improved Cyber Security in Smart Distribution System, International Journal on Future Revolution in Computer Science & Communication Engineering, Volume: 4 Issue: 2, pp.56-59, 2018.

[50] M. N. Kurt et al., Real-Time Detection of Hybrid and Stealthy Cyber-Attacks in Smart Grid, Cornell University Library, 2018.

[51] M-E. Pate-Cornell et al., Cyber Risk Management for Critical Infrastructure: A Risk Analysis Model And Three Case Studies, Risk Analysis, Vol. 38, No. 2, 2018.

[52] M. N. Kurt, et al., Distributed Quickest Detection of Cyber-Attacks in Smart Grid, IEEE Transactions on Information Forensics and Security, Vol. 13, Number: 8, 2018.

[53] M. U. Tarıq, and M. Wolf, Improving the Safety and Security of Wide-Area Cyber-Physical Systems Through a Resource-Aware, Service-Oriented Development Methodology, Proceedings of the IEEE | Vol. 106, No. 1, 2018.

[54] J. Lopez et al., A Resilient Architecture for the Smart Grid, IEEE Transactions on Industrial Informatics, 2018.

[55] A. Farraj et al., A Distributed Control Paradigm for Smart Grid to Address Attacks on Data Integrity and Availability, IEEE Transactions On Signal and Information Processing Over Networks, Vol. 4, No. 1, 2018.

[56] L. Che et al., Cyber Cascades Screening Considering the Impacts of False Data Injection Attacks, Transactions on Power Systems, IEEE, 2018.

[57] M. U. Şimşek et al., TPS3: A privacy-preserving data collection protocol for smart grids, Information Security Journal: A Global Perspective, p.102-118, 2018.

[58] Z. Ni and S. Paul, "A Multistage Game in Smart Grid Security: A Reinforcement Learning Solution," in IEEE Transactions on Neural Networks and Learning Systems, vol. 30, no. 9, pp. 2684-2695, Sept. 2019, DOI: 10.1109/TNNLS.2018.2885530.

[59] S.-K. Kim, J.-H. A. Huh, Study on the Improvement of Smart Grid Security Performance and Blockchain Smart Grid Perspective, Energies 2018, 2018.

[60] Z. El Mrabet, N. Kaabouch, H. El Ghazi, H. El Ghazi, Cyber-security in smart grid: Survey and challenges. Computers & Electrical Engineering, 67, pp. 469-482, 2018.

[61] K. K. Kimani, O. V. Vitalice, K. Langat, Cybersecurity challenges for IoT-based smart grid networks, International Journal of Critical Infrastructure Protection, Volume 25, Pages 36-49, 2019.

[62] E. Hossain, I. Khan, F. Un-Noor, S. S. Sikander, and M. S. H. Sunny, "Application of Big Data and Machine Learning in Smart Grid, and Associated Security Concerns: A Review," in IEEE Access, vol. 7, pp. 13960-13988, 2019.

[63] S. N. Islam, Z. Baig, S. Zeadally, Physical layer security for the smart grid: vulnerabilities, threats, and countermeasures. IEEE Transactions on Industrial Informatics, 15(12), 6522-6530, 2019.

[64] J. Sakhnini et al., Security aspects of Internet of Things aided smart grids: A bibliometric survey, Internet of Things, 100111, 2019.

[65] P. Kumar, Y. Lin, G. Bai, A. Paverd, J. S. Dong and A. Martin, "Smart Grid Metering Networks: A Survey on Security, Privacy and Open Research Issues," in IEEE Communications Surveys & Tutorials, vol. 21, no. 3, pp. 2886-2927, 2019.

[66] S. De Dutta, R. Prasad, Security for Smart Grid in 5G and Beyond Networks. Wireless Pers Commun 106, 261–273 2019. https://doi.org/10.1007/s11277-019-06274-5, 2019.

[67] A. Gusrialdi, Z. Qu, Smart Grid Security: Attacks and Defenses. In: Stroustrup J., Annaswamy A., Chakrabortty A., Qu Z. (eds) Smart Grid Control. Power Electronics and Power Systems. Springer, Cham. https://doi.org/10.1007/978-3-319-98310-3_13, 2019.

[68] F. A. Khan, M. Asif, A. Ahmad, M. Awais, H. A. Alharbi, Blockchain technology, improvement suggestions, security challenges on the smart grid and its application in healthcare for sustainable development, Sustainable Cities and Society, Volume 55, 102018, 2020.

[69] M. B. Mollah et al., "Blockchain for Future Smart Grid: A Comprehensive Survey," in IEEE Internet of Things Journal, DOI: 10.1109/JIOT.2020.2993601, 2020.

[70] M.Z. Gunduz, and R. Das, Cyber-security on the smart grid: Threats and potential solutions, Computer Networks, Volume 169, 107094, 2020.

[71] C.-M. Mathas et al., Threat landscape for smart grid systems. In Proceedings of the 15th International Conference on Availability, Reliability and Security (ARES '20). Association for Computing Machinery, New York, NY, USA, Article 111, 1–7. DOI: https://doi.org/10.1145/3407023.3409229, 2020.

[72] M. A. Ferrag et al., Cybersecurity for fog-based smart grid SCADA systems: Solutions and challenges, Journal of Information Security and Applications, Volume 52, 102500, 2020.

[73] M. F. Moghadam, M. Nikooghadam, A. H. Mohajerzadeh, B. Movali, A lightweight key management protocol for secure communication in smart grids, Electric Power Systems Research, Volume 178, 106024, 2020.

[74] Y. A. Zhang, H. Schwefel, H. Mohsenian-Rad, C. Wietfeld, C. Chen, and H. Gharavi, "Guest Editorial Special Issue on Communications and Data Analytics in Smart Grid," in IEEE Journal on Selected Areas in Communications, vol. 38, no. 1, pp. 1-4, 2020.

[75] H. Hittini, A. Abdrabou, L. Zhang, FDIPP: False Data Injection Prevention Protocol for Smart Grid Distribution Systems. Sensors 2020, 20, 679, 2020.

[76] B. R. Amin, S. Taghizadeh, S. Maric, M. J. Hossain, R. Abbas, Smart Grid Security Enhancement by Using Belief Propagation, IEEE Systems Journal, 2020.

[77] M. Shrestha, C. Johansen, J. Noll, D. Roverso, A Methodology for Security Classification applied to Smart Grid Infrastructures, International Journal of Critical Infrastructure Protection, 28, 100342, 2020.

[78] P. R. Jeyaraj, E. R. S. Nadar, A. Kathiresan, S. P. Asokan, Smart grid security enhancement by detection and classification of non‐technical losses employing deep learning algorithm, International Transactions on Electrical Energy Systems, e12521, 2020.

[79] I. Gandhi, L. Ravi, V. Vijayakumar, V. Subramaniyaswamy, Improving Security for Wind Energy Systems in Smart Grid Applications using Digital Protection Technique, Sustainable Cities and Society, 102265, 2020.

[80] A. A. Khan, V. Kumar, M. Ahmad, S. Rana, D. Mishra, PALK: Password-based anonymous lightweight key agreement framework for smart grid, International Journal of Electrical Power & Energy Systems, Volume 121, 106121, ISSN 0142-0615,https://doi.org/10.1016/j.ijepes.2020.106121, 2020.

[81] S. Tufail, S. Batool, A. I. Sarwat, False Data Injection Impact Analysis In AI-Based Smart Grid, 10.13140/RG.2.2.32994.25282, 2021.