Collaborative Research: SaTC: CORE: Small: Enabling Programmable In-Network Security for an Attack-Resilient Smart Grid

协作研究：SaTC：核心：小型：为抵御攻击的智能电网实现可编程网内安全

• 批准号: 2247721
• 负责人: Dong Jin
• 金额: $ 32万
• 依托单位: University of Arkansas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-06-01 至 2026-05-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2247721&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; CORE; Small

Modern energy systems are increasingly adopting Internet technology to boost efficiency, which opens new security frontiers. On the one hand, the underlying network infrastructure used by existing power grids significantly limits the performance of current security measures. On the other hand, Internet companies are undergoing a foundational change in their network infrastructure, mainly driven by deploying advanced programmable network architectures. This project aims to create and quantify programmable in-network security measures for an attack-resilient power grid. Achieving this objective involves integrating the advancement of data-plane programmability into energy system cyber infrastructure, and based on this, further exploring numerous applications across attack detection, mitigation, and prevention to secure today’s energy systems. The outcomes of the project will have significant impacts on industrial practice through the suitable adoption of the proposed programmable cyber-infrastructure to realize a defense-in-depth approach for future energy systems. The work will also train students and workforce with cutting-edge and cross-disciplinary knowledge in power systems, networking, and cyber-security. The project aims to build the next-generation programmable cyber-infrastructure for energy system protection with three research thrusts: (i) an in-network cyber-attack detection system with high-speed and customizable packet inspection; (ii) a self-healing system that automatically restores network connectivity and recovers corrupted measurements by considering characteristics from both communication networks and physical devices; and (iii) an in-network traffic scheduler that disrupts attack reconnaissance while maintaining quality-of-service requirements. The impact of the proposed research will lay a scientific foundation for system design through the development of models, algorithms, and tools that incorporate both cyber and physical system properties.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

现代能源系统越来越多地采用互联网技术来提高效率，这开辟了新的安全边界。一方面，现有电网使用的底层网络基础设施大大限制了当前安全措施的性能。另一方面，互联网公司正在经历其网络基础设施的根本性变化，这主要是由部署先进的可编程网络架构推动的。该项目旨在为具有抗攻击能力的电网创建和量化可编程的网内安全措施。实现这一目标包括将数据平面可编程性的进步整合到能源系统网络基础设施中，并在此基础上进一步探索攻击检测、缓解和预防方面的众多应用，以确保当今能源系统的安全。该项目的成果将通过适当采用拟议的可编程网络基础设施来实现对未来能源系统的深度防御方法，从而对工业实践产生重大影响。这项工作还将培训拥有电力系统、网络和网络安全方面前沿和跨学科知识的学生和劳动力。该项目旨在通过三项研究工作为能源系统保护建立下一代可编程网络基础设施：(I)具有高速和可定制的包检测的网络内网络攻击检测系统；(Ii)通过考虑通信网络和物理设备的特征自动恢复网络连接和恢复损坏的测量的自我修复系统；以及(Iii)在维持服务质量要求的同时中断攻击侦察的网络流量调度器。拟议研究的影响将通过开发结合网络和物理系统属性的模型、算法和工具为系统设计奠定科学基础。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Enhancing Fidelity of P4-Based Network Emulation with a Lightweight Virtual Time System

使用轻量级虚拟时间系统增强基于 P4 的网络仿真的保真度

• DOI: 10.1145/3573900.3591120
• 发表时间: 2023
• 期刊: June 2023
• 作者: Chen, Gong;Hu, Zheng;Jin, Dong
• 通讯作者: Jin, Dong

HELICSAuto: Automating the Development of Cyber-Physical Co-Simulation Framework for Smart Grids

HELICSAuto：自动开发智能电网的网络物理联合仿真框架

• DOI: 10.1145/3573900.3591118
• 发表时间: 2023
• 期刊: ACM
• 作者: Tadvin, Sayeb Mohammad;Jin, Dong;Lin, Hui
• 通讯作者: Lin, Hui

VT-IO: A Virtual Time System Enabling High-fidelity Container-based Network Emulation for I/O Intensive Applications

VT-IO：虚拟时间系统，为 I/O 密集型应用程序启用基于容器的高保真网络仿真

• DOI: 10.1145/3635307
• 发表时间: 2023
• 期刊: ACM Transactions on Modeling and Computer Simulation
• 影响因子: 0.9
• 作者: Chen, Gong;Hu, Zheng;Qu, Yanfeng;Jin, Dong
• 通讯作者: Jin, Dong

Industrial Network Protocol Security Enhancement Using Programmable Switches

使用可编程交换机增强工业网络协议安全性

• DOI: 10.1109/smartgridcomm57358.2023.10333874
• 发表时间: 2023
• 期刊: IEEE
• 作者: Hu, Zheng;Lin, Hui;Waind, Luke;Qu, Yanfeng;Chen, Gong;Jin, Dong
• 通讯作者: Jin, Dong

Combining Power Simulation and Programmable Network Emulation for Smart Grid Security Application Evaluation

结合电力仿真和可编程网络仿真进行智能电网安全应用评估

• DOI: 10.1145/3573900.3593633
• 发表时间: 2023
• 期刊: June 2023
• 作者: Chen, Gong;Hu, Zheng;Qu, Yanfeng;Jin, Dong
• 通讯作者: Jin, Dong