Abstract
IEC 61850 is the standard for substation automation which enables substation equipment called Intelligent Electronic Devices (IEDs) to communicate with each other. The communication protocol used by the IEDs to communicate is called GOOSE. Unfortunately, there are security researchers who have identified a number of vulnerabilities in the GOOSE protocol and have demonstrated that these vulnerabilities can be exploited to perform security attacks on the IEC 61850 network. By itself, the IEC 61850 standard does not address security requirements needed in a critical infrastructure. Therefore, a security mechanism to better protect the IEC 61850 network needs to be implemented. In their paper, Coates et al. has proposed a Trust System for securing the TCP/IP communication of SCADA network. However, due to the focus on TCP/IP communication, the Trust System by Coates et al. cannot be directly utilized for the IEC 61850 network because the IEDs are using GOOSE protocol to communicate. This paper proposed a Trust System for securing GOOSE communication between IEDs in IEC 61850 network. The proposed Trust System contains the modules for firewall, format and pattern validation, priority level assignment, alerting, blocking, and event logging.
| Original language | English |
|---|---|
| Pages (from-to) | 289-302 |
| Number of pages | 14 |
| Journal | International Journal of Security and its Applications |
| Volume | 10 |
| Issue number | 4 |
| DOIs | |
| Publication status | Published - 01 Jan 2016 |
Fingerprint
All Science Journal Classification (ASJC) codes
- Computer Science(all)
Cite this
}
Trust system architecture for securing GOOSE communication in IEC 61850 substation network. / Rashid, Muhammad Talha Abdul; Yussof, Salman; Yusoff, Yunus.
In: International Journal of Security and its Applications, Vol. 10, No. 4, 01.01.2016, p. 289-302.Research output: Contribution to journal › Article
TY - JOUR
T1 - Trust system architecture for securing GOOSE communication in IEC 61850 substation network
AU - Rashid, Muhammad Talha Abdul
AU - Yussof, Salman
AU - Yusoff, Yunus
PY - 2016/1/1
Y1 - 2016/1/1
N2 - IEC 61850 is the standard for substation automation which enables substation equipment called Intelligent Electronic Devices (IEDs) to communicate with each other. The communication protocol used by the IEDs to communicate is called GOOSE. Unfortunately, there are security researchers who have identified a number of vulnerabilities in the GOOSE protocol and have demonstrated that these vulnerabilities can be exploited to perform security attacks on the IEC 61850 network. By itself, the IEC 61850 standard does not address security requirements needed in a critical infrastructure. Therefore, a security mechanism to better protect the IEC 61850 network needs to be implemented. In their paper, Coates et al. has proposed a Trust System for securing the TCP/IP communication of SCADA network. However, due to the focus on TCP/IP communication, the Trust System by Coates et al. cannot be directly utilized for the IEC 61850 network because the IEDs are using GOOSE protocol to communicate. This paper proposed a Trust System for securing GOOSE communication between IEDs in IEC 61850 network. The proposed Trust System contains the modules for firewall, format and pattern validation, priority level assignment, alerting, blocking, and event logging.
AB - IEC 61850 is the standard for substation automation which enables substation equipment called Intelligent Electronic Devices (IEDs) to communicate with each other. The communication protocol used by the IEDs to communicate is called GOOSE. Unfortunately, there are security researchers who have identified a number of vulnerabilities in the GOOSE protocol and have demonstrated that these vulnerabilities can be exploited to perform security attacks on the IEC 61850 network. By itself, the IEC 61850 standard does not address security requirements needed in a critical infrastructure. Therefore, a security mechanism to better protect the IEC 61850 network needs to be implemented. In their paper, Coates et al. has proposed a Trust System for securing the TCP/IP communication of SCADA network. However, due to the focus on TCP/IP communication, the Trust System by Coates et al. cannot be directly utilized for the IEC 61850 network because the IEDs are using GOOSE protocol to communicate. This paper proposed a Trust System for securing GOOSE communication between IEDs in IEC 61850 network. The proposed Trust System contains the modules for firewall, format and pattern validation, priority level assignment, alerting, blocking, and event logging.
UR - http://www.scopus.com/inward/record.url?scp=84964786842&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84964786842&partnerID=8YFLogxK
U2 - 10.14257/ijsia.2016.10.4.27
DO - 10.14257/ijsia.2016.10.4.27
M3 - Article
VL - 10
SP - 289
EP - 302
JO - International Journal of Security and its Applications
JF - International Journal of Security and its Applications
SN - 1738-9976
IS - 4
ER -