Trust system architecture for securing GOOSE communication in IEC 61850 substation network

Muhammad Talha Abdul Rashid, Salman Yussof, Yunus Yusoff

Research output: Contribution to journalArticle

5 Citations (Scopus)

Abstract

IEC 61850 is the standard for substation automation which enables substation equipment called Intelligent Electronic Devices (IEDs) to communicate with each other. The communication protocol used by the IEDs to communicate is called GOOSE. Unfortunately, there are security researchers who have identified a number of vulnerabilities in the GOOSE protocol and have demonstrated that these vulnerabilities can be exploited to perform security attacks on the IEC 61850 network. By itself, the IEC 61850 standard does not address security requirements needed in a critical infrastructure. Therefore, a security mechanism to better protect the IEC 61850 network needs to be implemented. In their paper, Coates et al. has proposed a Trust System for securing the TCP/IP communication of SCADA network. However, due to the focus on TCP/IP communication, the Trust System by Coates et al. cannot be directly utilized for the IEC 61850 network because the IEDs are using GOOSE protocol to communicate. This paper proposed a Trust System for securing GOOSE communication between IEDs in IEC 61850 network. The proposed Trust System contains the modules for firewall, format and pattern validation, priority level assignment, alerting, blocking, and event logging.

Original languageEnglish
Pages (from-to)289-302
Number of pages14
JournalInternational Journal of Security and its Applications
Volume10
Issue number4
DOIs
Publication statusPublished - 01 Jan 2016

Fingerprint

Network protocols
Communication
Critical infrastructures
Automation

All Science Journal Classification (ASJC) codes

  • Computer Science(all)

Cite this

@article{fe7c6666cd8b41b0bd9271d569a8c5df,
title = "Trust system architecture for securing GOOSE communication in IEC 61850 substation network",
abstract = "IEC 61850 is the standard for substation automation which enables substation equipment called Intelligent Electronic Devices (IEDs) to communicate with each other. The communication protocol used by the IEDs to communicate is called GOOSE. Unfortunately, there are security researchers who have identified a number of vulnerabilities in the GOOSE protocol and have demonstrated that these vulnerabilities can be exploited to perform security attacks on the IEC 61850 network. By itself, the IEC 61850 standard does not address security requirements needed in a critical infrastructure. Therefore, a security mechanism to better protect the IEC 61850 network needs to be implemented. In their paper, Coates et al. has proposed a Trust System for securing the TCP/IP communication of SCADA network. However, due to the focus on TCP/IP communication, the Trust System by Coates et al. cannot be directly utilized for the IEC 61850 network because the IEDs are using GOOSE protocol to communicate. This paper proposed a Trust System for securing GOOSE communication between IEDs in IEC 61850 network. The proposed Trust System contains the modules for firewall, format and pattern validation, priority level assignment, alerting, blocking, and event logging.",
author = "Rashid, {Muhammad Talha Abdul} and Salman Yussof and Yunus Yusoff",
year = "2016",
month = "1",
day = "1",
doi = "10.14257/ijsia.2016.10.4.27",
language = "English",
volume = "10",
pages = "289--302",
journal = "International Journal of Security and its Applications",
issn = "1738-9976",
publisher = "Science and Engineering Research Support Society",
number = "4",

}

Trust system architecture for securing GOOSE communication in IEC 61850 substation network. / Rashid, Muhammad Talha Abdul; Yussof, Salman; Yusoff, Yunus.

In: International Journal of Security and its Applications, Vol. 10, No. 4, 01.01.2016, p. 289-302.

Research output: Contribution to journalArticle

TY - JOUR

T1 - Trust system architecture for securing GOOSE communication in IEC 61850 substation network

AU - Rashid, Muhammad Talha Abdul

AU - Yussof, Salman

AU - Yusoff, Yunus

PY - 2016/1/1

Y1 - 2016/1/1

N2 - IEC 61850 is the standard for substation automation which enables substation equipment called Intelligent Electronic Devices (IEDs) to communicate with each other. The communication protocol used by the IEDs to communicate is called GOOSE. Unfortunately, there are security researchers who have identified a number of vulnerabilities in the GOOSE protocol and have demonstrated that these vulnerabilities can be exploited to perform security attacks on the IEC 61850 network. By itself, the IEC 61850 standard does not address security requirements needed in a critical infrastructure. Therefore, a security mechanism to better protect the IEC 61850 network needs to be implemented. In their paper, Coates et al. has proposed a Trust System for securing the TCP/IP communication of SCADA network. However, due to the focus on TCP/IP communication, the Trust System by Coates et al. cannot be directly utilized for the IEC 61850 network because the IEDs are using GOOSE protocol to communicate. This paper proposed a Trust System for securing GOOSE communication between IEDs in IEC 61850 network. The proposed Trust System contains the modules for firewall, format and pattern validation, priority level assignment, alerting, blocking, and event logging.

AB - IEC 61850 is the standard for substation automation which enables substation equipment called Intelligent Electronic Devices (IEDs) to communicate with each other. The communication protocol used by the IEDs to communicate is called GOOSE. Unfortunately, there are security researchers who have identified a number of vulnerabilities in the GOOSE protocol and have demonstrated that these vulnerabilities can be exploited to perform security attacks on the IEC 61850 network. By itself, the IEC 61850 standard does not address security requirements needed in a critical infrastructure. Therefore, a security mechanism to better protect the IEC 61850 network needs to be implemented. In their paper, Coates et al. has proposed a Trust System for securing the TCP/IP communication of SCADA network. However, due to the focus on TCP/IP communication, the Trust System by Coates et al. cannot be directly utilized for the IEC 61850 network because the IEDs are using GOOSE protocol to communicate. This paper proposed a Trust System for securing GOOSE communication between IEDs in IEC 61850 network. The proposed Trust System contains the modules for firewall, format and pattern validation, priority level assignment, alerting, blocking, and event logging.

UR - http://www.scopus.com/inward/record.url?scp=84964786842&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84964786842&partnerID=8YFLogxK

U2 - 10.14257/ijsia.2016.10.4.27

DO - 10.14257/ijsia.2016.10.4.27

M3 - Article

AN - SCOPUS:84964786842

VL - 10

SP - 289

EP - 302

JO - International Journal of Security and its Applications

JF - International Journal of Security and its Applications

SN - 1738-9976

IS - 4

ER -