@inproceedings{08d2c9f861de4a428bcf1b64d83dc4e2,
title = "Towards Real-Time Distinction of Power System Faults and Cyber Attacks on Digital Substations Using Cyber-Physical Event Correlation",
abstract = "Cyber actors can target the unsecured IEC 61850 protocols in digital substations to open circuit breakers and affect the power system operation. Thus, system operators must detect cyber-physical anomalies and differentiate in real-time between power system faults and cyber attacks on digital substations for effective incident response. In this work, we propose a novel image encoding method for event correlation using cyber-physical time-series data, i.e., Phasor Measurement Units (PMUs) and Operational Technology (OT) network traffic. More specifically, we propose a dynamic variation of the Gramian Angular Field method, which generates image streams capturing in real-time the spatial-temporal features in PMU measurements and IEC 61850 GOOSE traffic throughput. The proposed method for cyber-physical event correlation uses an image fusion technique. The method is tested using the benchmark IEEE 9-bus system. It successfully distinguishes between three-phase faults and GOOSE cyber attacks, demonstrating its usefulness for power system cyber security analytics.",
keywords = "Cyber attacks, cyber security, cyber-physical power systems, event correlation, IEC 61850, image encoding",
author = "Ioannis Semertzis and Himanshu Goyel and Rajkumar, {Vetrivel S.} and Alfan Presekal and Alexandru Stefanov and Peter Palensky",
note = "Publisher Copyright: {\textcopyright} 2024 IEEE.; 12th Workshop on Modeling and Simulation of Cyber-Physical Energy Systems, MSCPES 2024 ; Conference date: 13-05-2024",
year = "2024",
doi = "10.1109/MSCPES62135.2024.10542753",
language = "English",
series = "2024 12th Workshop on Modeling and Simulation of Cyber-Physical Energy Systems, MSCPES 2024",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
booktitle = "2024 12th Workshop on Modeling and Simulation of Cyber-Physical Energy Systems, MSCPES 2024",
address = "United States",
}