Read the publication.

Abstract: Power systems are undergoing an intense process of modernization, and becoming highly dependent on networked systems used to monitor and manage power system components. These so-called Smart Grids comprise energy generation, transmission, and distribution subsystems, which are monitored and managed by Supervisory Control and Data Acquisition (SCADA) systems. In this paper, we discuss the benefits of using Software-Defined Networking (SDN) to assist in the deployment of next generation SCADA systems. We also present a specific Network-Based Intrusion Detection System (NIDS) for SDNbased SCADA systems, which uses SDN to capture network information and is responsible for monitoring the communication between power grid components. Our approach relies on SDN to periodically gather statistics from network devices, which are then processed by a specific type of Machine Learning algorithm, more precisely One-Class Classification (OCC) algorithms. Given that attack traces in SCADA networks are scarce and not publicly disclosed by utility companies, the main advantage of using OCC algorithms is that they do not depend on known attack signatures to detect possible malicious traffic. Our results indicate that OCC algorithms achieve an approximate accuracy of 98% and can be effectively used to detect cyber-attacks targeted against SCADA systems.

Read the publication.

Abstract: ICT and SCADA systems will play an increasingly operationally critical role in the smart grid. Cyber-attacks to these systems have the potential to result in outcomes in the physical domain. For example, power systems equipment could be damaged, reduced power quality could occur – potentially leading to blackouts – and, in extreme cases, result in safety- related incidents. Recently developed cybersecurity risk assess- ment guidelines for the smart grid reflect this understanding. However, they provide limited input about how these risks should be analysed. In this paper, we present how event trees – an inductive modelling technique – can be used to explore the potential impact of a cyber-attack to information assets in the smart grid. Using event tree analysis, we have examined cyber- attacks in the context of a voltage control use case, indicating how power grid protection measures may influence the outcome of such an attack and its physical impact to a smart grid.

Read the publication.

Abstract: Electric power grids are undergoing a modernization process. By relying on the ICT infrastructure and on Internet connectivity, these so-called Smart Grids are now able to provide new functionalities and to become more efficient. However, despite the existence of a few standards that aim to specify the secure operation of Smart Grids, utility companies do not have a comprehensive set of metrics and evaluation tools for assessing security properties in these infrastructures. Thus, it is necessary to develop new toolsets to provide support for vulnerability analysis in Smart Grids. This paper proposes ASTORIA, a framework developed to allow the simulation of attacks and the evaluation of their impact on Smart Grid infrastructures, using closely-related real devices and real topologies comprising both power grid elements as well as ICT and networking equipment. We anticipate that ASTORIA can be used by Smart Grid operators not only to analyze the impact of malicious attacks and other security threats in different components, but also to permit the development and evaluation of anomaly detection techniques in a simulation environment. Further, we present evaluation scenarios illustrating customizable Smart Grid topologies, comprising sensors, master and remote stations, and using an extensible set of attack profiles.

Read the publication.

Abstract:Smart grids and smart homes improve energy management by coupling communication capabilities to their devices. Due to computational constraints of these devices, employment of simplified communication protocols is necessary. In this paper, we investigate the use of communication protocols based on CoAP and 6LoWPAN in smart home environments. Specifically, we analyze the vulnerabilities a smart home employing CoAP and 6LoWPAN may be susceptible to. We also present a performance analysis of the use of these protocols for ensuring secure communications in smart homes.

Read the publication.

Abstract: Power grids are responsible for the transmission and distribution of electricity to end-users. These systems are undergoing a modernization process through the use of Information and Communication Technology (ICT), transforming the electric system into Smart Grids. In this context, Supervisory Control and Data Acquisition (SCADA) systems are responsible for the management and monitoring of substations and field devices. In this paper, we investigate the use of SDN as an approach to assist in the modernization of SCADA systems. We discuss its possible benefits, such as simplified management of power system resources. Moreover, SDN can facilitate the creation of new network applications that previously, with traditional networks, were more complex to be implemented. To illustrate the benefits of the use of SDN in SCADA, we designed a mechanism that aims to prevent a possible eavesdropper from fully capturing communication flows between SCADA components. The mechanism was implemented as an SDN-based application for SCADA systems that uses multipath routing, which relies on SDN features to frequently modify communication routes between SCADA devices. Further, we performed an experimental evaluation to verify the impact and performance of the mechanism in the SCADA network.

Read the publication.

Abstract: Smart grids are power distribution networks that include a significant communication infrastructure, which is used to collect usage data and monitor the operational status of the grid. As a consequence of this additional infrastructure, power networks are at an increased risk of cyber-attacks. In this letter, we address the problem of detecting and attributing anomalies that occur in the sub-meter power consumption measurements of a smart grid, which could be indicative of malicious behavior. We achieve this by clustering a set of statistical features of power measurements that are determined using the Smoothed Pseudo Wigner Ville (SPWV) energy Time-Frequency (TF) distribution. We show how this approach is able to more accurately distinguish clusters of energy consumption than simply using raw power measurements. Our ultimate goal is to apply the principles of profiling power consumption measurements as part of an enhanced anomaly detection system for smart grids.

Read the publication.

Abstract: Smart grids are power distribution networks characterised by an increased level of automation of the infrastructure, sensors and actuators connected to monitoring and control centres, and are strongly supported by information and communication technology (ICT). Consequently, smart grids are more vulnerable to cyber-attacks. In this position paper, we advocate the need for management patterns that capture best-practices for ensuring the resilience of smart grids to cyber-attacks and other related challenges. Management patterns are akin to software design patterns in the sense that patterns promote the use of well-established solutions to recurring problems. These patterns describe how to orchestrate the cyber-physical behaviour of ICT, industrial control systems and human resources in a safe manner, in response to cyber-attacks.

See you again soon, thank you for the visit.

General Coordinator

Institution: UFRGS
Email: granville@inf.ufrgs.br
Home Page: http://www.inf.ufrgs.br/~granville/

Lisandro Zambenedetti Granville is associate professor at the Institute of Informatics of the Federal University of Rio Grande do Sul (UFRGS), Brazil. He received his M.Sc. and Ph.D. degrees, both in computer science, from UFRGS in 1998 and 2001, respectively. He is member of the Brazilian Internet Committee (CGI.br), co-chair of the Network Management Research Group (NMRG) of the Internet Research Task Force (IRTF) together with Olivier Festor, and chair of the IEEE Committee on Network Operations and Management (CNOM) – 2013-2015. He has served as a TPC member for many important events in the area of computer networks (e.g., IM, NOMS, and CNSM) and was TPC co-chair of DSOM 2007 and NOMS 2010.

Researcher

Institution: UFRGS
Email: alberto@inf.ufrgs.br
Home Page: http://www.inf.ufrgs.br/~alberto/

Alberto Egon Schaeffer Filho is an Associate Professor at the Institute of Informatics of the Federal University of Rio Grande do Sul (UFRGS) since October/2012. He holds a Ph.D. (2009) degree in Computing from Imperial College London, and obtained my M.Sc. (2005) and B.Sc. (2002) degrees in Computer Science at UFRGS. Between 2009-2012 he was a Research Associate in the School of Computing and Communications at Lancaster University, working with security and resilience monitoring in next generation networks. Since February 2013 he also holds a position of Visiting Researcher at Lancaster University.

Researcher

Institution: UFRGS
Email: paschoal@inf.ufrgs.br
Home Page: http://www.inf.ufrgs.br/~paschoal/

Luciano Paschoal Gaspary holds a Ph.D. in Computer Science (UFRGS, 2002) and serves as Associate Professor at the Institute of Informatics, UFRGS. He is currently Executive Director of the National Laboratory on Computer Networks (LARC) and, from 2009 to 2013, was Managing Director of the Brazilian Computer Society (SBC). Prof. Gaspary has been involved in various research areas, mainly computer networks, network management and computer system security. He is author of more than 120 full papers published in leading peer-reviewed publications and has a history of dedication to research activities such as organization of scientific events, participation in the TPC of relevant symposia, and participation as editorial board member of various journals.

Researcher

Institution: UFRGS
Email: marinho@inf.ufrgs.br
Home Page: http://www.inf.ufrgs.br/~marinho/

Prof. Marinho P. Barcellos received BSc and MSc degrees in Computer Science from Federal University of Rio Grande do Sul (1989 and 1993, respectively) and PhD degree in Computer Science from University of Newcastle Upon Tyne (1998). In 2003-2004, he worked in a joint project between University of Manchester and British Telecomm research labs on high-performance multicast transport. Since 2008 Prof. Barcellos is an Associate Professor at UFRGS. He has authored many papers in leading journals and conferences related to computer networks, network and service management, distributed systems, and computer security, also serving as TPC member and chair. Prof. Barcellos was the elected chair of the Special Interest Group on Computer Security of the Brazilian Computer Society (CESeg/SBC) 2011-2012. His current research interests are cloud computing data center networks, software-defined networking, information-centric networks and security aspects of those networks.

Researcher

Institution: UFRGS
Email:  cpereira@eletro.ufrgs.br
Home Page: http://www.ece.ufrgs.br/~cpereira/

Carlos Eduardo Pereira graduated in electrical engineering (1987) and received a masters degree in computer science (1990) , both from the Federal University of Rio Grande do Sul (UFRGS). He also holds a Ph.D. in electrical engineering from the University of Stuttgart in Germany (1995) . Carlos is currently an associate professor of the Department of Electrical Engineering at UFRGS and member of the International Federation of Automatic Control (IFAC) and IFAC Council (2011-2014). He is also president of the Superior Council of the Brazilian Automation Society (SBA). Carlos serves as associate editor of the scientific journal Control Engineering Practice (Elsevier) and Journal of Control and Automation (SBA). His topics of interest include: object oriented, real-time systems, industrial automation, industrial buses, and software engineering.

Researcher

Institution: AIT
Email: Paul.Smith@ait.ac.at
Home Page:
http://austrianinstituteoftechnology.academia.edu/PaulSmith

Dr Paul Smith is a Senior Scientist in the Safety and Security Department of the AIT, Austrian Institute of Technology.  Previous to this appointment he was a Senior Research Associate at Lancaster University, UK.  He received his PhD in September 2003 and graduated in 1999 with an honours degree in Computer Science from Lancaster. Paul’s research interests are focused on the security and resilience of critical information infrastructures. He has participated in a number of international research projects in this area, and has published articles on numerous aspects that relate to this core interest.

PhD Student – Project Manager

Institution: UFRGS
Email: jwickboldt@inf.ufrgs.br
Home Page: http://www.inf.ufrgs.br/~jwickboldt/

Juliano Araujo Wickboldt is a Ph.D. student at the Federal University of Rio Grande do Sul (UFRGS), in Brazil. He achieved his B.Sc. degree in Computer Science at Pontifical Catholic University of Rio Grande do Sul (PUCRS) in 2006. He also holds an M.Sc. degree from UFRGS conducted in a joint project with HP Labs Bristol and Palo Alto. Juliano was intern at NEC Labs Europe in Heidelberg, Germany for one year between 2011 and 2012. His current research interests include cloud resource management and software-defined networking.