Man-in-the-Middle Attack Test-bed Investigating Cyber-security Vulnerabilities in Smart Grid SCADA Systems

The increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in the Smart Grid has exposed them to a wide range of cyber-security issues, and there are a multitude of potential access points for cyber attackers. This paper presents a SCADA-specific cyber-security test-bed which contains SCADA software and communication infrastructure. This test-bed is used to investigate an Address Resolution Protocol (ARP) spoofing based man-in-the-middle attack. Finally, the paper proposes a future work plan which focuses on applying intrusion detection and prevention technology to address cyber-security issues in SCADA systems.

Impact of Cyber-Security Issues on Smart Grid

Greater complexity and interconnectivity across systems embracing Smart Grid technologies has meant that cyber-security issues have attracted significant attention. This paper describes pertinent cyber-security requirements, in particular cyber attacks and countermeasures which are critical for reliable Smart Grid operation. Relevant published literature is presented for critical aspects of Smart Grid cyber-security, such as vulnerability, interdependency, simulation, and standards. Furthermore, a preliminary study case is given which demonstrates the impact of a cyber attack which violates the integrity of data on the load management of real power system. Finally, the paper proposes future work plan which focuses on applying intrusion detection and prevention technology to address cyber-security issues. This paper also provides an overview of Smart Grid cyber-security with reference to related cross-disciplinary research topics.

Day-Ahead Optimal Charging/Discharging Scheduling for Electric Vehicles in Micro-Grids

A micro-grid is an autonomous system which can be operated and connected to an external system or isolated with the help of energy storage systems (ESSs). While the daily output of distributed generators (DGs) strongly depends on the temporal distribution of natural resources such as wind and solar, unregulated electric vehicle (EV) charging demand will deteriorate the imbalance between the daily load and generation curves. In this paper, a statistical model is presented to describe daily EV charging/discharging behaviour. An optimisation problem is proposed to obtain economic operation for the micro-grid based on this model. In day-ahead scheduling, with estimated information of power generation and load demand, optimal charging/discharging of EVs during 24 hours is obtained. A series of numerical optimization solutions in different scenarios is achieved by serial quadratic programming. The results show that optimal charging/discharging of EVs, a daily load curve can better track the generation curve and the network loss and required ESS capacity are both decreased. The paper also demonstrates cost benefits for EVs and operators.

Analysis of Load Impact on Small-signal Stability based on Load Active Power Sensitivity

While load flow conditions vary with different loads, the small-signal stability of the entire system is closely related with to the locations, capacities and models of loads. In this paper, load impacts with different capacities and models on the small-signal stability are analysed. In the real large-scale power system case, the load sensitivity which denotes the sensitivity of the eigenvalue with respect to the load active power is introduced and applied to rank the loads. The loads with high sensitivity are also considered.

Tripping Control for Transient Stability in Coordinated Hydro and Wind Generation

Over-frequency generator tripping (OFGT) is used to cut off extra generation to balance power and loads in an isolated system. In this paper the impact of OGFT as a consequence of grid-connected wind farms and under-frequency load shedding (UFLS) is analysed. The paper uses a power system model to demonstrate that wind power fluctuations can readily render OFGT and UFLS maloperation. Using combined hydro and wind generation, the paper proposes a coordinated strategy which resolves problems associated with OFGT and UFLS and preserves system stability.

Coordinated Design of Phase Measurement Unit and Power System Stabilisers in Large Scale Power System

This paper presents a case-study of a PMU application with PSS support in a real large scale Chinese power system to suppress inter-area oscillations. The paper uses PMU measured feedback signals from a PSS input signal for dynamic torque analysis (DTA). In the paper, a mathematical model of multi-machine power system is described, followed by formation of the residue and DTA indices. Simulations of the model are used with a large-scale power system model to demonstrate the role of PSS and the equivalence of DTA residue indices.

Rule-Based Intrusion Detection System for SCADA Networks

Increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in Smart Grids potentially means greater susceptibility to malicious attackers. SCADA systems with legacy communication infrastructure have inherent cyber-security vulnerabilities as these systems were originally designed with little consideration of cyber threats. In order to improve cyber-security of SCADA networks, this paper presents a rule-based Intrusion Detection System (IDS) using a Deep Packet Inspection (DPI) method, which includes signature-based and model-based approaches tailored for SCADA systems. The proposed signature-based rules can accurately detect several known suspicious or malicious attacks. In addition, model-based detection is proposed as a complementary method to detect unknown attacks. Finally, proposed intrusion detection approaches for SCADA networks are implemented and verified using a ruled based method.

A New Principal Curve Algorithm for Nonlinear Principal Component Analysis

This paper emerged from work supported by EPSRC grant GR/S84354/01 and proposes a method of determining principal curves, using spline functions, in principal component analysis (PCA) for the representation of non-linear behaviour in process monitoring. Although principal curves are well established, they are difficult to implement in practice if a large number of variables are analysed. The significant contribution of this paper is that the proposed method has minimal complexity, assuming simple spline geometry, thus enabling efficient computation. The paper provides a foundation for further work where multiple curves may be required to represent underlying non-linear information in complex data.

Intrusion Detection System for Network Security in Synchrophasor Systems

Synchrophasor systems will play a crucial role in next generation Smart Grid monitoring, protection and control. However these systems also introduce a multitude of potential vulnerabilities from malicious and inadvertent attacks, which may render erroneous operation or severe damage. This paper proposes a Synchrophasor Specific Intrusion Detection System (SSIDS) for malicious cyber attack and unintended misuse. The SSIDS comprises a heterogeneous whitelist and behavior-based approach to detect known attack types and unknown and so-called ‘zero-day’ vulnerabilities and attacks. The paper describes reconnaissance, Man-in-the-Middle (MITM) and Denial-of-Service (DoS) attack types executed against a practical synchrophasor system which are used to validate the real-time effectiveness of the proposed SSIDS cyber detection method.

Intrusion Detection System for IEC 60870-5-104 Based SCADA Networks

Increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in Smart Grids potentially means greater susceptibility to malicious attackers. SCADA systems with legacy communication infrastructure have inherent cyber-security vulnerabilities as these systems were originally designed with little consideration of cyber threats. In order to improve cyber-security of SCADA networks, this paper presents a rule-based Intrusion Detection System (IDS) using a Deep Packet Inspection (DPI) method, which includes signature-based and model-based approaches tailored for SCADA systems. The proposed signature-based rules can accurately detect several known suspicious or malicious attacks. In addition, model-based detection is proposed as a complementary method to detect unknown attacks. Finally, proposed intrusion detection approaches for SCADA networks are implemented and verified via Snort rules.

Large-Scale Wind Generator Cascaded Tripping

Large scale wind farms are subject to tripping, as a consequence of turbine failure, over-sensitive protection, turbines not equipped with low-voltage ride through (LVRT), and reactive power compensation device defects which can lead to voltage rises. This paper considers pertinent issues which render tripping based on a study of LVRT and wind farm protection, with methods to avoid large scale wind generator tripping proposed. The results of LVRT field tests in Jiuquan, China in December 2012 show that the proposed approaches are effective. The paper also presents work which proposes an early warning system to forecast the risk of wind power tripping.

Application of PMUs to Coordinate Hydroelectric and Wind Power Plant Operation

It is acknowledged that wind power is a stochastic energy source compared to hydroelectric generation which is easily scheduled. In this paper a scheme for coordinating wind power plant and hydroelectric power plant is presented by using PMUs to measure and control the state of wind and hydro power plants. Hydroelectric generation is proposed as a method of energy reserve and compensation in the context of wind power fluctuation in order to avoid full or partial curtailment of wind generation to benefit wind providers. The feasibility of this proposed scheme is investigated by power flow calculation and stability analysis using the IEEE 30-bus power system model.

Voltage and power quality improvement strategy for a DFIG wind turbine during variable wind conditions

This paper presents a voltage and power quality enhancement scheme for a doubly-fed induction generator (DFIG) wind farm during variable wind conditions. The wind profiles were derived considering the measured data at a DFIG wind farm located in Northern Ireland (NI). The aggregated DFIG wind farm model was validated using measured data at a wind farm during variable generation. The voltage control strategy was developed considering the X/R ratio of the wind farm feeder which connects the wind farm and the grid. The performance of the proposed strategy was evaluated for different X/R ratios, and wind profiles with different characteristics. The impact of flicker propagation along the wind farm feeder and effectiveness of the proposed strategy is also evaluated with consumer loads connected to the wind farm feeder. It is shown that voltage variability and short-term flicker severity is significantly reduced following implementation of the novel strategy described.