JAIST Repository
https://dspace.jaist.ac.jp/Title

スマートグリッドサイバーセキュリティ実験：アーキテクチャと方法論

Author(s)LE, Duy Tan

CitationIssue Date

2021-03

TypeThesis or Dissertation

Text version

ETDURLhttp://hdl.handle.net/10119/17476

RightsDescription

Supervisor:BEURAN, Razvan Florin, 先端科学技術研
究科, 博士Japan Advanced Institute of Science and Technology

Abstract

Smart Grid Cybersecurity Experimentation:
Architecture and Methodology
Doctoral Degree
Beuran’s Laboratory
LE Duy Tans1820035
The smart grid is a vital part of the Japanese initiative named “Society 5.0”. It is also one of thecore technologies enabling sustainable economic and social developments. This next-generationelectrical power system integrates the traditional electrical grid and computer technology toenhance the automation, connectivity, and communication of the different power network
components. In recent years, various attacks have been made on the smart grid system, which leadto serious harmful consequences.
The smart grid structure is complex and includes two essential parts: network communicationand the power grid. Researchers need to consider the relationship between these components forfurther system investigation and improvement. Moreover, it is not a trivial activity to implement areal smart grid system for the cybersecurity experiment and validation process, since it entails highrisk of destroying the electrical infrastructure and equipment, resulting in enormous economic
consequences and even in danger regarding human lives. As a result, in this critical domain wheretesting on a real system is so hazardous, simulation and analysis techniques can be considered as
an effective solution to make smart grid cybersecurity experimentation possible.
The attack simulation and analysis tools are mainly applied to simulate attacks and emulate theactual circumstances in which these attacks occur, particularly system settings and network
topologies. The application of real incident simulation tools to cybersecurity experimentation is a
primary factor for enhancing the efficacy of the experimentation process. Due to its pioneeringcharacteristics, not many research studies currently exist on practical cybersecurity
experimentation for the smart grid. To the best of our knowledge, this is one of the first researchworks that thoroughly addresses this important issue.
This dissertation identifies the need for realistic cybersecurity experimentation for the smart
grid and formulates the corresponding system design requirements. A general architecture forsmart grid cybersecurity experimentation, which fulfills these specifications, is also introduced.
To deal with the great system complexity but still achieve our goal, we divided smart gridcybersecurity experimentation into two parts: the co-simulation approach and the analyticalmodeling approach. The specifications, general architectures and methodologies of both are
determined and detailed herein.

In the co-simulation approach, we introduced and implemented GridAttackSim. This novel cosimulation framework enables the simulation of smart grid infrastructure characteristics, allows
various cybersecurity attacks to be simulated, and evaluates their consequences. A case study wasperformed with two different test feeders to validate the functionality of GridAttackSim.
In the analytical modeling approach, we first provided a literature review on the current stateof-the-art for smart grid attack analysis. The most promising directions were then applied to designand implement GridAttackAnalyzer (Cyber Attack Analysis Framework for Smart Grids). A casestudy with various attack scenarios was conducted to validate this framework.
This dissertation’s main contribution is a methodology that can effectively support realistic
cybersecurity experimentation for the smart grid. This methodology was implemented in the formof the two frameworks mentioned above, GridAttackSim and GridAttackAnalyzer. Using theseframeworks, researchers can determine the consequences of various attack types, thus making
possible the early development and evaluation of new anomaly detection methods and mitigationeven before their actual implementation. Moreover, the frameworks can also be used to define
effective approaches for the implementation of smart grid technology, for instance, to determine
efficient communication requirements for device operation.
In addition, the systems can be used for cybersecurity training of IT experts and cybersecurityprofessionals. For example, based on evaluating various security metrics, IT experts andcybersecurity professionals can discover all the possible attack paths, and determine which
vulnerable devices on those paths should be protected in advance to prevent the most significantdamage. It also becomes possible to compare the effectiveness of specific device-level strategies
deployed for different devices. For the network level, the performance of various defense strategies
for smart grid systems can be assessed. Furthermore, our work can help system planners to estimate
the attack damage cost on a smart grid system.
Keywords: smart grid, cybersecurity experimentation, simulation, co-simulation, attack
analysis.