Test Specification TC25.TS1

TC25.TS1

TC25

Impact analysis of Denial-of-Service (DoS) attack in a digital substation

A digital substation is realised by the IEC 61850 standard which mandates a common Ethernet based communication infrastructure within a substation. This experiment seeks to analyse the impact of a DoS attack that successfully compromises the substation communication infrastructure. This may lead to delayed or loss of trip, block commands, thereby directly impacting grid operations.

The test system comprises of a real-time grid simulator, at least one Ethernet switch, and multiple IEC 61850 compliant devices interconnected in a HIL setup. (See SuT for further information)

• KPIs: loss of load, voltage deviations, frequency fluctuations on simulated system under a DoS attack
• Time taken and quality of service for IEC 61850 based communication under a DoS attack

Input parameters:

• Type of power system simulated
• Network topology of substation
• Protection schemes applied through the relays
• Fault type and duration
• Type of attack: DoS

Output parameters:

• KPIs: loss of load, voltage deviations, frequency fluctuations on simulated system under a DoS attack
• Avg time for intra substation communication and communication quality of service (jitter, packet loss, latency, throughput, availability)

The test is a HIL experiment as described in the SuT and specific test system. The test consists of a reference test for the baseline measurements and repeat of this test with the DoS attack. The test design is as follows:

1. Start the system with all devices functioning as required and the system is stabilized.
2. Run a test simulation with a short-circuit or fault condition at location monitored by relay.
3. Note that the appropriate relay communicates trip signal via IEC 61850 GOOSE message. Note this time as reference time T1.
4. Circuit breaker is opened, and the fault is cleared.
5. Carry out DoS attack via external emulator/device to target specific IED/relay.
6. Repeat steps 2 to 3 and note the new time T2.
7. Quantify impact of attack through KPIs and note down targeted device.
8. Repeat for additional target devices at different locations to identify most critical digital asset.

• All devices are ON and running
• Real-time grid simulator can send and receive messages to and from the hardware devices
• IEDs receive messages from the real-time grid simulator

Successful recording of KPIs for each targeted device. The fault event generated by the real-time grid simulator has predeterminate fault duration and wait time. The DoS attack operates independently of the HIL experiment sequence and can occur at any moment of time in the sequence.

N/A

Order of tens of seconds

Configuration of HIL test setup, quality of time synchronization.

Suspension criteria: Errors in devices/misconfiguration

Stopping criteria: the experiment can be concluded when the KPIs for various target devices are noted. Alternatively, if the attack causes cascading effects or a blackout, it can be stopped.