A Real-Time Testbed Environment for Cyber-Physical Security on the Power Grid
A Real-Time Testbed Environment for Cyber-Physical Security on the Power Grid
复制标题
电网信息物理安全实时测试平台环境
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
C. McParland
中科院分区：
文献类型：
--
作者：
Georgia Koutsandria;R. Gentz;Mahdi Jamei;A. Scaglione;S. Peisert;C. McParland
电网等网络物理系统(CPSS)的可信性和安全性对于确保其安全运行、性能和经济效益至关重要。许多网络物理安全技术的目的是确保即使在暴露的网络环境中也能连续可靠地运行，例如用于CPSS的网络入侵检测系统(NIDSS)。但这些方法的验证远远超出了标准网络分析，因为有意义的测试还必须结合对物理系统行为的实际理解和对网络活动的响应。我们在这篇文章中的目标是展示一个可以支持这种验证的试验床环境的示例。在它中，真实的网络流量，模拟和工业控制网络，与模拟的物理模型实时交互，扩展和利用“硬件在环”和“网络在环”的能力。试验台是理论和实践之间的桥梁，并提供了许多功能，包括网络通信、数据管理以及由网络入侵检测系统执行的网络物理状态分析的虚拟化。流量由真实的网络分路器捕获，并被转发到真实的数据管理环境，还接收来自模拟工业控制环境的数据报告。为了说明我们试验台的功能，我们展示了数据如何通过“物理感知”网络入侵检测系统进行交叉检查，以识别不符合其网络-物理安全规则的网络流量。
The trustworthiness and security of cyber-physical systems (CPSs), such as the power grid, are of paramount importance to ensure their safe operation, performance, and economic efficiency. The aim of many cyber-physical security techniques, such as network intrusion detection systems (NIDSs) for CPSs, is to ensure continuous reliable operation even in exposed network environments. But the validation of such methods goes well beyond standard network analysis, since meaningful tests must also integrate realistic understanding of the physical systems behavior and response to the network activity. Our goal in this paper is to showcase an example of a testbed environment that can support such validation. In it, real network traffic, emulating and industrial control network, interacts with simulated physical models in real-time, extending and leveraging "hardware-in-the-loop" and "cyber-in-the-loop" capabilities. The testbed is a bridge between theory and practice and offers a number of features, including network communications, data management, as well as the virtualization of cyber-physical state analytics performed by the NIDS. The traffic is captured by real network taps and is forwarded to a real data management environment, receiving also the data reports from the simulated industrial control environment. To illustrate the capabilities of our testbed we show how the data are cross-checked by a "physics aware" NIDS, identifying network traffic that does not comply with its cyber-physical security rules.
使用 RT-LAB 和mosaic 对通用自动化架构进行集成智能电网仿真
DOI：
10.1109/smartgridcomm.2014.7007645
发表时间：
2014
期刊：
2014 IEEE International Conference on Smart Grid Communications (SmartGridComm)
影响因子：
--
作者：
M. Büscher;A. Claassen;M. Kube;S. Lehnhoff;K. Piech;S. Rohjans;S. Scherfke;C. Steinbrink;J. Velasquez;F. Tempez;Y. Bouzid
通讯作者：
Y. Bouzid