An Attack-Trace Generating Toolchain for Cybersecurity Study of IEC61850 based Substations

摘要

The digitisation of modern power grid substations allows them to better support various advanced operations. However, it also poses greater risk of cyber-related attacks. There is an array of cybersecurity solutions (e.g., intrusion detection systems) available in the market to prevent, detect, or respond to cyberattacks. This calls for the creation of datasets and test cases for the validation of those cybersecurity solutions. In our recent work, we have generated a synthesized dataset for testing of cybersecurity solutions of IEC 61850 based substations. Our dataset contained traces for some typical attack-free disturbance scenarios and cyberattack scenarios in a substation. In this work, we present the toolchain we have developed to allow easy generation of such traces. We discuss the design considerations behind our toolchain and provide step-by-step guide to potential users on how to create customized trace files for specific scenarios using our toolchain. By open-sourcing the project for the broad community, we hope our toolchain will enrich the body of testing datasets for substation cyber security solutions.