Assessing DER network cybersecurity defences in a power-communication co-simulation environment
Assessing DER network cybersecurity defences in a power-communication co-simulation environment
复制标题
在电力通信联合仿真环境中评估 DER 网络网络安全防御
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
C. Lai
中科院分区：
文献类型：
--
作者：
Jay Johnson;Ifeoma Onunkwo;Patricia Codeiro;Brian Wright;Nicholas J. Jacobs;C. Lai
随着分布式能源在电力系统中的渗透，电力系统的攻击面不断扩大。DER设备的误操作或恶意控制现在可以对电网运行造成严重干扰。幸运的是，有许多选择可以防御和限制对手对这些新创建的DER通信网络的影响，这些网络通常穿越公共互联网。然而，实现这些安全功能将增加通信延迟，从而对实时DER网格支持服务的有效性产生不利影响。在这项工作中，一系列名为SCEPTRE的软件工具被用来创建一个联合仿真环境，其中SunSpec兼容的光伏逆变器被部署为虚拟机，并与模拟的通信网络设备互连。在控制网络上部署了网络分段、加密和移动目标防御安全功能，以评估它们对网络安全指标和电力系统性能的影响。结果表明，添加这些安全功能不会影响基于DER的电网控制系统，但在适当实施时会改善网络的网络安全状况。
Increasing penetrations of interoperable distributed energy resources (DER) in the electric power system are expanding the power system attack surface. Maloperation or malicious control of DER equipment can now cause substantial disturbances to grid operations. Fortunately, many options exist to defend and limit adversary impact on these newly-created DER communication networks, which typically traverse the public internet. However, implementing these security features will increase communication latency, thereby adversely impacting real-time DER grid support service effectiveness. In this work, a collection of software tools called SCEPTRE was used to create a co-simulation environment where SunSpec-compliant photovoltaic inverters were deployed as virtual machines and interconnected to simulated communication network equipment. Network segmentation, encryption, and moving target defence security features were deployed on the control network to evaluate their influence on cybersecurity metrics and power system performance. The results indicated that adding these security features did not impact DER-based grid control systems but improved the cybersecurity posture of the network when implemented appropriately.