Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services

Georgios Tertytchny; Hazem Karbouj; Lenos Hadjidemetriou; Charalambos Charalambous; Maria K. Michael; Marios Sazos; Michail Maniatakos

doi:10.1109/CyberPELS49534.2020.9311531

Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services

Georgios Tertytchny, Hazem Karbouj, Lenos Hadjidemetriou, Charalambos Charalambous, Maria K. Michael, Marios Sazos, Michail Maniatakos

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Rapid modernisation of distribution power systems aims to improve system efficiency and reliability while increasing photovoltaic (PV) penetration levels. However, ensuring the cyber security of such smart distribution grids has emerged as major challenge. Cyber-attacks on key equipment of distribution power systems may lead to inefficient operation of the grid, breach private smart meter data or cause intentional false tripping of feeders. In this paper, a man in the middle attack on a commercial solar PV inverter, which provides ancillary services to the grid, is demonstrated to cause an intentional false tripping of the entire feeder leading to a regional blackout. The successful experimental implementation of the attack reveals the effectiveness and the risk of this attack. Detailed risk analysis is conducted to asses the influence of different factors, such as feeder loading and PV inverter capacity, on the effectiveness of the proposed attack.

Original language	English (US)
Title of host publication	2020 IEEE CyberPELS, CyberPELS 2020
Publisher	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)	9781728195919
DOIs	https://doi.org/10.1109/CyberPELS49534.2020.9311531
State	Published - Oct 13 2020
Event	2020 IEEE CyberPELS, CyberPELS 2020 - Miami, United States Duration: Oct 13 2020 → …

Publication series

Name	2020 IEEE CyberPELS, CyberPELS 2020

Conference

Conference	2020 IEEE CyberPELS, CyberPELS 2020
Country/Territory	United States
City	Miami
Period	10/13/20 → …

Keywords

Cyber-physical attack
man in the middle attack
smart grid
solar PV inverter

ASJC Scopus subject areas

Artificial Intelligence
Computer Networks and Communications
Energy Engineering and Power Technology
Electrical and Electronic Engineering
Safety, Risk, Reliability and Quality

Access to Document

10.1109/CyberPELS49534.2020.9311531

Cite this

Tertytchny, G., Karbouj, H., Hadjidemetriou, L., Charalambous, C., Michael, M. K., Sazos, M., & Maniatakos, M. (2020). Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services. In 2020 IEEE CyberPELS, CyberPELS 2020 Article 9311531 (2020 IEEE CyberPELS, CyberPELS 2020). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/CyberPELS49534.2020.9311531

Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services. / Tertytchny, Georgios; Karbouj, Hazem; Hadjidemetriou, Lenos et al.
2020 IEEE CyberPELS, CyberPELS 2020. Institute of Electrical and Electronics Engineers Inc., 2020. 9311531 (2020 IEEE CyberPELS, CyberPELS 2020).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Tertytchny, G, Karbouj, H, Hadjidemetriou, L, Charalambous, C, Michael, MK, Sazos, M & Maniatakos, M 2020, Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services. in 2020 IEEE CyberPELS, CyberPELS 2020., 9311531, 2020 IEEE CyberPELS, CyberPELS 2020, Institute of Electrical and Electronics Engineers Inc., 2020 IEEE CyberPELS, CyberPELS 2020, Miami, United States, 10/13/20. https://doi.org/10.1109/CyberPELS49534.2020.9311531

Tertytchny G, Karbouj H, Hadjidemetriou L, Charalambous C, Michael MK, Sazos M et al. Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services. In 2020 IEEE CyberPELS, CyberPELS 2020. Institute of Electrical and Electronics Engineers Inc. 2020. 9311531. (2020 IEEE CyberPELS, CyberPELS 2020). doi: 10.1109/CyberPELS49534.2020.9311531

@inproceedings{69fb118d02f14079b28d8972d8870ef5,

title = "Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services",

abstract = "Rapid modernisation of distribution power systems aims to improve system efficiency and reliability while increasing photovoltaic (PV) penetration levels. However, ensuring the cyber security of such smart distribution grids has emerged as major challenge. Cyber-attacks on key equipment of distribution power systems may lead to inefficient operation of the grid, breach private smart meter data or cause intentional false tripping of feeders. In this paper, a man in the middle attack on a commercial solar PV inverter, which provides ancillary services to the grid, is demonstrated to cause an intentional false tripping of the entire feeder leading to a regional blackout. The successful experimental implementation of the attack reveals the effectiveness and the risk of this attack. Detailed risk analysis is conducted to asses the influence of different factors, such as feeder loading and PV inverter capacity, on the effectiveness of the proposed attack.",

keywords = "Cyber-physical attack, man in the middle attack, smart grid, solar PV inverter",

author = "Georgios Tertytchny and Hazem Karbouj and Lenos Hadjidemetriou and Charalambos Charalambous and Michael, {Maria K.} and Marios Sazos and Michail Maniatakos",

note = "Publisher Copyright: {\textcopyright} 2020 IEEE.; 2020 IEEE CyberPELS, CyberPELS 2020 ; Conference date: 13-10-2020",

year = "2020",

month = oct,

day = "13",

doi = "10.1109/CyberPELS49534.2020.9311531",

language = "English (US)",

series = "2020 IEEE CyberPELS, CyberPELS 2020",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

booktitle = "2020 IEEE CyberPELS, CyberPELS 2020",

}

TY - GEN

T1 - Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services

AU - Tertytchny, Georgios

AU - Karbouj, Hazem

AU - Hadjidemetriou, Lenos

AU - Charalambous, Charalambos

AU - Michael, Maria K.

AU - Sazos, Marios

AU - Maniatakos, Michail

PY - 2020/10/13

Y1 - 2020/10/13

N2 - Rapid modernisation of distribution power systems aims to improve system efficiency and reliability while increasing photovoltaic (PV) penetration levels. However, ensuring the cyber security of such smart distribution grids has emerged as major challenge. Cyber-attacks on key equipment of distribution power systems may lead to inefficient operation of the grid, breach private smart meter data or cause intentional false tripping of feeders. In this paper, a man in the middle attack on a commercial solar PV inverter, which provides ancillary services to the grid, is demonstrated to cause an intentional false tripping of the entire feeder leading to a regional blackout. The successful experimental implementation of the attack reveals the effectiveness and the risk of this attack. Detailed risk analysis is conducted to asses the influence of different factors, such as feeder loading and PV inverter capacity, on the effectiveness of the proposed attack.

AB - Rapid modernisation of distribution power systems aims to improve system efficiency and reliability while increasing photovoltaic (PV) penetration levels. However, ensuring the cyber security of such smart distribution grids has emerged as major challenge. Cyber-attacks on key equipment of distribution power systems may lead to inefficient operation of the grid, breach private smart meter data or cause intentional false tripping of feeders. In this paper, a man in the middle attack on a commercial solar PV inverter, which provides ancillary services to the grid, is demonstrated to cause an intentional false tripping of the entire feeder leading to a regional blackout. The successful experimental implementation of the attack reveals the effectiveness and the risk of this attack. Detailed risk analysis is conducted to asses the influence of different factors, such as feeder loading and PV inverter capacity, on the effectiveness of the proposed attack.

KW - Cyber-physical attack

KW - man in the middle attack

KW - smart grid

KW - solar PV inverter

UR - http://www.scopus.com/inward/record.url?scp=85100256331&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85100256331&partnerID=8YFLogxK

U2 - 10.1109/CyberPELS49534.2020.9311531

DO - 10.1109/CyberPELS49534.2020.9311531

M3 - Conference contribution

AN - SCOPUS:85100256331

T3 - 2020 IEEE CyberPELS, CyberPELS 2020

BT - 2020 IEEE CyberPELS, CyberPELS 2020

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2020 IEEE CyberPELS, CyberPELS 2020

Y2 - 13 October 2020

ER -

Demonstration of Man in the Middle Attack on a Commercial Photovoltaic Inverter Providing Ancillary Services

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this