Academia.eduAcademia.edu

Figure 2 – uploaded by Junho Hong

See full PDFdownloadDownload figure
The ICCP protocol is used for communications between control centers, which enables sharing of SCADA information, while DNP 3.0 is used between control centers and substations for measurement and control. All these communications are conducted via SCADA and _ substation user interfaces. Dispatcher Training Simulator (DTS) is used for training of operators and simulation of system operation, control and restoration scenarios. consequence of a cyber intrusion scenario on the power grid. Impact analysis can be achieved by computer simulations in a way similar to the present contingency evaluations for online security assessment. Impact analysis is the task to analyze intrusion behaviors and evaluate the consequences of a cyber attack on the power system. The mitigation module serves to illustrate the preventive, remedial or restorative actions to mitigate potential damages caused by cyber intrusion scenarios. Analytical techniques can be evaluated on a software based cyber-power system testbed with the control center and substation models.

Figure 2 The ICCP protocol is used for communications between control centers, which enables sharing of SCADA information, while DNP 3.0 is used between control centers and substations for measurement and control. All these communications are conducted via SCADA and _ substation user interfaces. Dispatcher Training Simulator (DTS) is used for training of operators and simulation of system operation, control and restoration scenarios. consequence of a cyber intrusion scenario on the power grid. Impact analysis can be achieved by computer simulations in a way similar to the present contingency evaluations for online security assessment. Impact analysis is the task to analyze intrusion behaviors and evaluate the consequences of a cyber attack on the power system. The mitigation module serves to illustrate the preventive, remedial or restorative actions to mitigate potential damages caused by cyber intrusion scenarios. Analytical techniques can be evaluated on a software based cyber-power system testbed with the control center and substation models.

Related Figures (2)

The real-time Monitoring, Anomaly detection, Impact analysis, and Mitigation strategies (RAIM) are the primary tasks in the proposed cyber security framework as illustrated in Fig. 1. Real-time monitoring allows tracking of the activities on the cyber-power system. Anomaly detection is to identify the events on cyber systems that are indicative of potential cyber intrusions. The task of impact analysis is to evaluate the
The real-time Monitoring, Anomaly detection, Impact analysis, and Mitigation strategies (RAIM) are the primary tasks in the proposed cyber security framework as illustrated in Fig. 1. Real-time monitoring allows tracking of the activities on the cyber-power system. Anomaly detection is to identify the events on cyber systems that are indicative of potential cyber intrusions. The task of impact analysis is to evaluate the
Fig. 3. Integration of Power System Simulator and Testbed ICT Network 4) Cyber-physical system: Cyber security tasks can be divided into 2 parts, i.e., before intrusion and after intrusion. The proposed testbed uses anomaly detection to detect an intrusion or an intrusion attempt. Power system simulation tools can be used before or after an intrusion takes place to perform impact analysis. The anomaly detection system is based on known attack signatures. A method based on temporal relationships of IED data and information logs at two different time points has been developed in this project [8]. A Distributed Intrusion Detection System (DIDS) based on the idea of distributed collaboration between multiple IDS engines to enhance the performance and detection precision is proposed [9].
Fig. 3. Integration of Power System Simulator and Testbed ICT Network 4) Cyber-physical system: Cyber security tasks can be divided into 2 parts, i.e., before intrusion and after intrusion. The proposed testbed uses anomaly detection to detect an intrusion or an intrusion attempt. Power system simulation tools can be used before or after an intrusion takes place to perform impact analysis. The anomaly detection system is based on known attack signatures. A method based on temporal relationships of IED data and information logs at two different time points has been developed in this project [8]. A Distributed Intrusion Detection System (DIDS) based on the idea of distributed collaboration between multiple IDS engines to enhance the performance and detection precision is proposed [9].
Related topics:
Computer SecurityAnomaly DetectionReal Time ApplicationDistributed AgentsRemote AccessSafety SystemsSCADA systemPower System SimulationDistributed Environment
580 California St., Suite 400
San Francisco, CA, 94104
© 2025 Academia. All rights reserved