Survey on Vulnerability Testing in the Smart Grid

• Published in: IEEE access Vol. 12; pp. 119146 - 119173
• Main Authors: Banik, Shampa, Rogers, Michael, Mahajan, Satish M., Emeghara, Chikezie M., Banik, Trapa, Craven, Robert
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 2024; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Availability; cyber range; cyber-attack; Cyberattack; Cybersecurity; Electric utilities; Electrical loads; Fallout; Information and communication technology; Network security; Prevention and mitigation; simulation; Smart grid; Smart grid technology; Smart grids; Taxonomy; Testing; Threat evaluation; Vulnerability
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2024.3449642

The rapid integration of Information and Communication Technology (ICT) is transforming the traditional electrical grid into a Smart Grid. Smart grids enable two-way communication and improved monitoring and control between utilities and customers. However, due to its heterogeneous nature, public exposure, and weak security at low-powered devices, the smart grid has vulnerabilities to various malicious threats, adversaries, and cyber attacks, which may affect cost and service availability. Additionally, when the systems' confidentiality, integrity, or availability are compromised, the resulting fallout can threaten national security and have cascading effects on human lives. Given the extreme consequences of an attack, smart-grid technology must be thoroughly tested for correct operation and security before it is deployed. As a result, vulnerability testing of smart grids, not only for correctness but for security purposes, has been the subject of numerous studies by academics, government agencies, and private companies. The survey identifies key cyber and physical vulnerabilities that pose significant risks to load management applications and overall grid stability. It also presents a broad spectrum of potential cyber threats and attacks targeting the grid with various mitigation techniques and spotlights simulation as the vulnerability testing methodology conducted in recent pertinent research works. Finally, we analyze the gaps in the current research, focusing on integrating cybersecurity analysis in simulation. We then recommend future research directions focused on smart grid cyber ranges.