Developing Cyber-Secure and Resilient Protection Schemes for Power Networks

近年来，信息技术在电力网络中的应用越来越广泛，这使得电力系统极易受到网络攻击。保护系统是最关键的易受网络攻击的部件之一，因为它们直接影响到电力系统的完整性和稳定性。因此，本研究计划的主要目标是通过解决保护系统的网络安全挑战，促进向更安全的电网的平稳过渡。该项目的短期目标将集中于开发网络弹性变电站、通信辅助保护（CAP）方案和广域保护（WAP）方案。1-变电站：继电保护主要用于变电站对电力系统部件进行保护。变电站仪表和互联水平的提高使这些继电器暴露于网络攻击，例如，当变电站被破坏时。因此，确保变电站的安全是实现保护系统网络弹性的第一步。该项目将在变电站内开发一个中央网络安全和弹性（CCSR）系统。开发的CCSR将具有变电站IT和操作技术系统的态势感知能力，并将能够检测和减轻网络入侵。2- CAP方案：虽然保护变电站是必要的，以防止对保护继电器的网络攻击，但这是不够的，因为一些继电器是基于从变电站外部通信的外部数据运行的。因此，CAP模式需要额外的防御来保护外部数据。本研究旨在开发具有网络弹性的分布式CAP方案，通过该方案，继电器可以可靠地检测故障并确认从相邻继电器接收的数据的真实性。3- WAP方案：WAP方案补充了传统的保护继电器，避免了它们的故障，使用来自网络中不同位置的时间同步数据进行操作。然而，WAP方案对通信数据的依赖使它们容易受到网络攻击。本研究旨在为每个WAP方案开发技术，以检测、识别和减轻网络攻击。这些技术将在用于控制和保护目的之前检查接收数据的合法性。该项目的目标包括开发工具，以加强CAP和WAP方案和变电站的网络弹性。该计划将通过(i)开发工具和指南来保护其系统和产品免受网络攻击，以及（ii）培训能够满足其未来安全需求的高素质人员，使其工业受益者受益。该计划将通过减少与网络攻击相关的停电和限电次数及其相关成本，对加拿大社会和经济产生积极影响，并将加强国家的国家安全。因此，加拿大的间接受益者是政府和公众。

The recent trend to expand the use of Information Technology (IT) in power networks has made power systems potentially vulnerable to cyber-attacks. Protection systems are among the most critical cyber-vulnerable components, as they directly affect the integrity and stability of power systems. Thus, the main objective of this research program is to facilitate a smooth transition to more-secure power grids by tackling the cyber-security challenges of protection systems. The short-term objectives of this program will focus on developing cyber-resilient substations, Communication-Assisted Protection (CAP) schemes, and Wide-Area Protection (WAP) schemes. 1- Substations: Protective relays are mainly utilized in substations to protect power system components. The increasing level of instrumentation and interconnectedness in substations exposes these relays to cyber-attacks, e.g., when substations are compromised. Thus, securing substations is the first step toward the cyber-resiliency of protection systems. This program will develop a Central Cyber-Security and Resiliency (CCSR) system within substations. The developed CCSR will have situational awareness about the IT and operational technology systems of a substation, and will be able to detect and mitigate cyber-intrusions. 2- CAP schemes: Although securing substations is necessary to prevent cyberattacks against protective relays, it is not adequate, since some relays operate based on external data communicated from the outside of substations. Hence, CAP schemes require additional defense to secure the external data. This research aims to develop cyber-resilient distributed CAP schemes by which relays can reliably detect faults and confirm the authenticity of the data received from neighbouring relays. 3- WAP schemes: WAP schemes, which complement conventional protective relays and avoid their malfunctions, operate using time-synchronized data from various locations in the network. The reliance of WAP schemes on communicated data, however, makes them vulnerable to cyber-attacks. This research aims to develop techniques for each WAP scheme to detect, identify, and mitigate cyber-attacks. These techniques will check the legitimacy of received data before being used for control and protection purposes. The objectives of this program include the development of tools that will reinforce the cyber-resiliency of CAP and WAP schemes and substations. This program will benefit its industrial beneficiaries by (i) developing tools and guidelines to secure their systems and products against cyber-attacks, and (ii) training high-quality personnel who can address their future security needs. This program will have positive implications on Canadian society and its economy, by decreasing the number of cyber-attack-related blackouts and brownouts and their associated costs, and will enhance the national security of the country. Thus, the indirect beneficiaries in Canada are the government and general public.