Assurance of cybersecurity is crucial to ensure dependability and resilience of smart power grid systems. In order to evaluate the impact of potential cyber attacks, to assess deployability and effectiveness of cybersecurity measures, and to enable hands-on exercise and training of personals, an interactive, virtual environment that emulates the behaviour of a smart grid system, namely smart grid cyber range, has been demanded by industry players as well as academia. A smart grid cyber range is typically implemented as a combination of cyber system emulation, which allows interactivity, and physical system (i.e., power grid) simulation that are tightly coupled for consistent cyber and physical behaviours. However, its design and implementation require intensive expertise and efforts in cyber and physical aspects of smart power systems as well as software/system engineering. While many industry players, including power grid operators, device vendors, research and education sectors are interested, availability of the smart grid cyber range is limited to a small number of research labs. To address this challenge, we have developed a framework for modelling a smart grid cyber range using an XML-based language, called SG-ML, and for "compiling" the model into an operational cyber range with minimal engineering efforts. The modelling language includes standardized schema from IEC 61850 and IEC 61131, which allows industry players to utilize their existing configurations. The SG-ML framework aims at making a smart grid cyber range available to broader user bases to facilitate cybersecurity R\&D and hands-on exercises.
翻译:确保网络安全对于保障智能电网系统的可靠性与韧性至关重要。为评估潜在网络攻击的影响、检验网络安全措施的部署能力与有效性,并支持人员开展实践操作与培训,工业界与学术界均亟需一种能够模拟智能电网行为的交互式虚拟环境——即智能电网网络靶场。典型的智能电网网络靶场通过紧密耦合的“网络系统仿真”(提供交互性)与“物理系统(即电网)仿真”(确保网络与物理行为一致性)来实现。然而,其设计与实现需要从业者具备智能电网网络与物理层面的深厚专业知识,以及软件/系统工程能力。尽管包括电网运营商、设备厂商、科研教育机构在内的许多产业参与者对此兴趣浓厚,但目前智能电网网络靶场仅局限于少数研究实验室可用。为应对这一挑战,我们开发了一套创新框架,支持通过基于XML的建模语言(名为SG-ML)定义智能电网网络靶场模型,并将该模型“编译”为可运行靶场,大幅降低工程开发工作量。该建模语言融合了IEC 61850与IEC 61131标准架构,使产业参与者能够直接利用现有配置。SG-ML框架旨在推动智能电网网络靶场面向更广泛用户群体开放,助力网络安全研发与实践演练。