Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical...

23
Smart City Testbed Chen-Ching Liu Anurag Srivastava Adam Hahn

Transcript of Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical...

Page 1: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Smart City Testbed Chen-Ching Liu

Anurag Srivastava

Adam Hahn

Page 2: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Objectives

Self-Healing Power Grids

Integration of Smart Meters and Microgrids and

Associated Socio-Economic Issues

Capabilities

Electric power distribution network

Integration with wide area transmission network

Electricity market simulation environment

Information, communications and control technology

Renewable energy and storage devices

Control

Energy Management

System

Distribution Management

System

Meter Data Management

Data

Simulation

Real-world

Testbed Overview

Comprehensive research and collaboration testbed spanning across all power system domains

Page 3: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Transmission

Communication (DNP/OPC)

Page 4: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Distribution

x

Distribution Substation

Distribution Control Center

Communication (DNP/OPC)

Page 5: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Smart City Testbed

• ADD Picture

Page 6: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Smart Grid Demonstration and Research Investigation Lab (SGDRIL)

Page 7: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Use Case #1: Substation Intrusion Detection

Page 8: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Intrusion into a substation network

Vendor Personnel or

Site Engineers

Primary Control Center Network

Substation Network

`

Application Servers

SCADA Servers

Database Servers

` `

Modem

Data Concentrator

User Interfaces Dispatcher

Training Simulators

User Interfaces

Hackers

Router

Firewall

Firewall

Firewall

ModemApplication

ServersSCADA Servers

Database Servers

`

`

User Interfaces

Dispatcher Training Simulators

Firewall Secondary Control Center

Network Frame Relay Network / Radiowave / Dedicated Line

Modem

Corporate WAN

Remote Access Network through Dial-up, VPN,

or Wireless

... ...

...

... ...

...

...... ... ... ... ... ...

Breaker

Breaker

Breaker

Breaker

Breaker Breaker Breaker Breaker Breaker Breaker

BreakerBreaker

Breaker

Transformer Transformer

Busbar

BusbarBusbar

Transmission line Transmission line

Feeder Feeder Feeder Feeder Feeder Feeder

Modem

Other Corporate Intranets

Page 9: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Potential threats in a substation based on IEC 61850

IED Relay PMU

Merging Unit

User-interface GPS Station

Level

Bay Level

Process Level

Compromise user-

interface

Gain access to bay level devices

Modify GOOSE message

Generate fabricated

analog values

Change device settings

CT and VT

Circuit Breaker

Actuator

Page 10: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Relays

Page 11: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

IEEE 39 bus system (DIgSILENT)

Simultaneous attacks – without ADS

1. Bus 6

2. Bus 12

3. Bus 15

4. Bus 28

5. Bus 36

6. Bus 33 7. Bus 34

Page 12: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

IEEE 39 bus system (DIgSILENT)

Without ADS - Blackout

1. Bus 6

2. Bus 12

3. Bus 15

4. Bus 28

5. Bus 36

6. Bus 33 7. Bus 34

Gen 10

Gen 2

Gen 1

Gen 6

Gen 3

Gen 9

Page 13: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

IEEE 39 bus system (DIgSILENT)

Without ADS - Blackout

Attack Start

Attack End

13

Frequency

Voltage

Page 14: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

IEEE 39 bus system (DIgSILENT)

With ADS - Normal

Frequency Voltage

Page 15: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Use Case #2: Wide Area Applications

Page 16: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Phasor Data Concentrator

(PDC)

RTDS

Test PMU

Analog Test Signals

C37.118.1 Data

C37.118.1 Data

.csv Data (Offline)

PMU Testing

Automatically generated

PMU test report

Page 17: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Testing of Synchrophasor Applications

Programmable PMU

PMUs

Power system Simulator (ie : RTDS, OPAL-RT, PSS/E, Powerworld, PowerFactory) PDCs

PMUs PDCs Real Power system

Applications

Applications

Page 18: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Use Case #3: Cyber-Physical Analysis

Page 19: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Cyber-Physical Analysis

Communication Delay in IEEE-14 Bus Test Case

Communication Delay in IEEE-30 Bus Test Case

Page 20: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Breaker opening and out of synchronism reclosing

Aurora attack with local beaker opening

Aurora attack with remote beaker opening

Real Time Simulation for Aurora Attack

Page 21: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Use Case #4: Microgrid Control

Page 22: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Real Time Energy Management and Control for Microgrid

Page 23: Smart City Testbed - Carnegie Mellon Universityelectricity... · Use Case #3: Cyber-Physical Analysis ... IEEE-14 Bus Test Case Communication Delay in IEEE-30 Bus Test Case . Breaker

Thanks