Supporting Implementation of CyberAttacks against Substation at KASTEL Security Lab Energy

We are working in KASTEL Security Lab Energy at Institute of Automation and Applied Informatics (IAI) with research focus on security of energy systems. Investigations regarding modern security challenges for Smart Grids with respect to different protocols are being carried out. In order to overcome the identified challenges, various statistical and machine learning based attack detection algorithms would be incorporated together to develop a Hybrid Intrusion Detection and Prevention System. Substation level from the Smart Grid with IEC 60870-5-104 communication protocol is under focus with simulated components such as Remote Terminal Unit (RTU), Battery Storage System (BSS), Controller, Intelligent Electronic Devices (IEDs), gateways, switches etc. For basic level, attacker is supposed to be an insider having access to VLAN but it would be extended to a remote attacker and then accessing the network would be another task. These attack scenarios are to be performed with the purpose of aiding identification and prioritisation of important cyber and physical features for detection of attacks.