Comprehensively Analyzing the Impact of Cyberattacks on Power Grids

Abstract

The increasing digitalization of power grids and especially the shift towards IP-based communication drastically increase the susceptibility to cyberattacks, potentially leading to blackouts and physical damage. Understanding the involved risks, the interplay of communication and physical assets, and the effects of cyberattacks are paramount for the uninterrupted operation of this critical infrastructure. However, as the impact of cyberattacks cannot be researched in real-world power grids, current efforts tend to focus on analyzing isolated aspects at small scales, often covering only either physical or communication assets. To fill this gap, we present WATTSON, a comprehensive research environment that facilitates reproducing, implementing, and analyzing cyberattacks against power grids and, in particular, their impact on both communication and physical processes. We validate WATTSON's accuracy against a physical testbed and show its scalability to realistic power grid sizes. We then perform authentic cyberattacks, such as Industroyer, within the environment and study their impact on the power grid's energy and communication side. Besides known vulnerabilities, our results reveal the ripple effects of susceptible communication on complex cyber-physical processes and thus lay the foundation for effective countermeasures.

arXiv comment14 pages, 13 figures, accepted at EuroS&P 2023

References in corpus (7)

• pandapower - an Open Source Python Tool for Convenient Modeling, Analysis and Optimization of Electric Power Systems
• Models for the modern power grid
• Data Framing Attack on State Estimation
• Methods for Actors in the Electric Power System to Prevent, Detect and React to ICT Attacks and Failures
• PowerDuck: A GOOSE Data Set of Cyberattacks in Substations
• Graph-based Model of Smart Grid Architectures
• Large-Scale Co-Simulation of Power Grid and Communication Network Models with Software in the Loop

Cited by in corpus (4)

• Secure Integration of 5G in Industrial Networks: State of the Art, Challenges and Opportunities
• SoK: Evaluations in Industrial Intrusion Detection Research
• Sherlock: A Dataset for Process-aware Intrusion Detection Research on Power Grid Networks
• Investigation of Multi-stage Attack and Defense Simulation for Data Synthesis