Research on Security Testing Technologies for Embedded Terminals in Intelligent Substation

doi:10.12204/j.issn.1000-7229.2021.02.015

Abstract

Abstract:

Vulnerability of embedded terminals used for measurement and control has been one crucial cyber-security threat for intelligent substation. According to fragility analysis, a security evaluation index system for embedded terminals in intelligent substation is proposed in this paper. Research on security testing technologies for embedded terminals in intelligent substation is also carried on to cover all indices. Supported by an intelligent substation laboratory, a security assessment for five types of embedded terminal is conducted, which gives the assessment process, results and rectification suggestions. The work in this paper can be used to evaluate the availability, to discover and patch the vulnerability, and finally to improve the level of security for intelligent substation. Meanwhile, this study provides a reference for online security protection for secondary system of intelligent substation.

Key words: intelligent substation, embedded terminal, network security, evaluation index, testing technology

CLC Number:

TM769
TP309

LI Fuyang, LI Jun’e, LIU Linbin, LIU Wei, LIN Hai, NI Ming. Research on Security Testing Technologies for Embedded Terminals in Intelligent Substation[J]. ELECTRIC POWER CONSTRUCTION, 2021, 42(2): 126-136.

Figures/Tables 11

Table 1 Composition of secondary system of intelligent substation

Fig.1 Network architecture of control zone in intelligent substation

Table 2 Operating systems and protocols used for secondary equipment in control zone of intelligent substation

Fig.2 Index system for security evaluation of embedded terminals in intelligent substation

Fig.3 Testing technology system for security of embedded terminals in intelligent substation

Fig.4 Network topology and devices of intelligent substation for assessment case

Table 3 Evaluation indices and testing technologies for devices under assessment

Table 4 Test outcomes of RTUs, relay protection devices and measuring-control devices

Table 5 Test outcomes of measuring-control devices, smart terminals and merging units

Table 6 Assessment results of the 5 types embedded terminals

Table A1 Evaluation indices and testing technologies for embedded terminals in intelligent substation

References 16

[1]	王宇, 李俊娥, 周亮, 等. 针对嵌入式终端安全威胁的电力工控系统自愈体系[J]. 电网技术, 2020,44(9):3582-3594.
	WANG Yu, LI Jun'e, ZHOU Liang, et al. self-healing architecture for power industrial control systems against security threats to embedded terminals[J]. Power System Technology, 2020,44(9):3582-3594.
[2]	CZECHOWSKI R, WICHER P, WIECHA B. Cyber security in communication of SCADA systems using IEC 61850[C]// 2015 Modern Electric Power Systems (MEPS). Wroclaw, Poland; IEEE, 2015: 1-7.
[3]	陆余良, 李永祥, 孙乐昌, 等. TCP/IP协议脆弱性分析[J]. 计算机科学, 2001,28(11):112-114.
	LU Yuliang, LI Yongxiang, SUN Lechang, et al. The analysis of the fragility of the TCP/IP protocol[J]. Computer Science, 2001,28(11):112-114.
[4]	CHAI J W, LIU S M. Cyber security vulnerability assessment for Smart substations[C]// 2016 IEEE PES Asia-Pacific Power and Energy Engineering Conference (APPEEC). Xi’an, China: IEEE, 2016: 1368-1373.
[5]	NOCE J, LOPES Y, FERNANDES N C, et al. Identifying vulnerabilities in smart gric communication networks of electrical substations using GEESE 2.0[C]// 2017 IEEE 26th International Symposium on Industrial Electronics (ISIE). Edinburgh, UK: IEEE, 2017: 111-116.
[6]	刘姗梅, 王胜, 柴继文, 等. 智能变电站安全脆弱性评估方法[J]. 重庆大学学报, 2017,40(7):52-62.
	LIU Shanmei, WANG Sheng, CHAI Jiwen, et al. The assessment method of cyber-security vulnerability for smart substation[J]. Journal of Chongqing University, 2017,40(7):52-62.
[7]	ELBEZ G, KELLER H B, HAGENMEYER V. A cost-efficient software testbed for cyber-physical security in IEC 61850-based substations[C]// 2018 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm). Aalborg, Denmark: IEEE, 2018: 1-6.
[8]	刘念, 张建华, 段斌, 等. 网络环境下变电站自动化通信系统脆弱性评估[J]. 电力系统自动化, 2008,32(8):28-33.
	LIU Nian, ZHANG Jianhua, DUAN Bin, et al. Vulnerability assessment for communication system of network-based substation automation system[J]. Automation of Electric Power Systems, 2008,32(8):28-33.
[9]	曹一家, 姚欢, 黄小庆, 等. 基于D-S证据理论的变电站通信系统信息安全评估[J]. 电力自动化设备, 2011,31(6):1-5.
	CAO Yijia, YAO Huan, HUANG Xiaoqing, et al. Security evaluation of substation communication system based on D-S theory[J]. Electric Power Automation Equipment, 2011,31(6):1-5.
[10]	王媛媛. 智能变电站电通信网络安全评价系统的设计[D]. 大连: 大连理工大学, 2016.
	WANG Yuanyuan. Design of safety evaluation system for the communication network of intelligent substation[D]. Dalian: Dalian University of Technology, 2016.
[11]	XIANG Y M, WANG L F, ZHANG Y C. Adequacy evaluation of electric power grids considering substation cyber vulnerabilities[J]. International Journal of Electrical Power & Energy Systems, 2018,96:368-379.
[12]	国家电力监管委员会. 变电站二次系统安全防护方案[R]. 北京:国家电力监管委员会, 2006.
[13]	国家市场监督管理总局, 国家标准化管理委员会. 电力信息系统安全等级保护实施指南 GB/T 37138—2018[S]. 北京: 中国标准出版社, 2018.
[14]	国家市场监督管理总局, 国家标准化管理委员会. 信息安全技术网络安全等级保护基本要求 GB/T 22239—2019[S]. 北京: 中国标准出版社, 2019.
[15]	国家市场监督管理总局, 中国国家标准化管理委员会. 信息安全技术网络安全等级保护基本要求 GB/T 22239—2019[S]. 北京: 中国标准出版社, 2019.
[16]	莫阮清. 220 kV智能变电站二次系统设计与实施方案研究[D]. 上海: 上海交通大学, 2017.
	MO Ruanqing. The design and application of secondary system in 220kV smart substation[D]. Shanghai: Shanghai Jiao Tong University, 2017.