Implementacija mehanizma upravljanja kriptografskim ključevima u programskoj biblioteci libiec61850

master's thesis

• Title (english): Implementation of cryptography key management in software library libiec61850
• Author: Marko Vladić
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Vlado Sruk (član povjerenstva)
• Committee member: Dejan Škvorc (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023-07-14, Croatia

Abstract

Ovaj rad predstavlja nadogradnju biblioteke libIEC61850 na način da se implementira mehanizam raspodjele kriptografskih ključeva koji se unutar biblioteke mogu koristiti za zaštitu komunikacije putem protokola kao što su GOOSE i SV. Na samom početku rada opisan je standard IEC 61850 te njegova struktura. Prikazan je i objašnjen sustav automatizacije trafostanice kome je standard IEC 61850 i namijenjen te njegov 3-razinski raspored. Nastavno na SAS, dan je kratak pregled modela podataka koji se koriste unutar njega, opis komunikacijskih mehanizama i protokola kojima obavlja prijenos podataka kao i njihovo mapiranje na protokole poput TCP-a, IP-a, UDP-a i ostalih. U radu se nalazi i jednostavan primjer SCL datoteke na kojem je ukratko predstavljen SCL koji služi tome da se definiraju IED-i, podaci koji se prenose u komunikaciji između njih te cjelokupna komunikacija unutar SAS-a. Također je dan i uvid u sigurnost IEC 61850 standarda na način da su objašnjene prijetnje te napadi na sustave koji ga implementiraju, ali i kako ih ublažiti i spriječiti koristeći standard IEC 62351 čija namjena je da bude nadopuna spomenutom standardu. Budući da je praktični dio temeljen na njemu, ukratko je opisana biblioteka libIEC61850 te je prikazano pokretanje jednog od primjera iz nje. Implementirani protokol raspodjele ključeva je preuzet iz [5] te je opisan u sklopu ovog rada. Konačno, rad sadrži i način implementacije spomenutog protokola, načini izgradnje implementiranih primjera te demonstraciju implementiranog protokola.

Abstract (english)

This paper presents an upgrade of the libIEC61850 library in a way to implement a cryptographic key distribution mechanism that can be used within the library to protect communication through protocols such as GOOSE and SV. At the very beginning of the work, the IEC 61850 standard and its structure are described. The substation automation system for which the IEC 61850 standard is intended and its 3-level layout are presented and explained. Continuing on SAS, a brief overview of the data model used within it is given, a description of the communication mechanisms and protocols used to transfer data, as well as their mapping to protocols such as TCP, IP, UDP and others. The paper also contains a simple example of an SCL file that briefly presents the SCL used to define IEDs, the data transmitted in communication between them, and the entire communication within SAS. An insight into the security of the IEC 61850 standard is also given, in such a way that the threats and attacks on the systems that implement it are explained, as well as how to mitigate and prevent them using the IEC 62351 standard, which is intended to be a supplement to the mentioned standard. Since the practical part is based on it, the libIEC61850 library is briefly described and the running of one of the examples from it is shown. The implemented key distribution protocol was taken from [5] and is described as part of this paper. Finally, the paper contains the implementation method of the mentioned protocol, way to build implemented code examples and the demonstration of the implemented protocol.

• Keywords: IEC 61850; libIEC61850; IEC 62351; upravljanje kriptografskim ključevima; raspodjela kriptografskih ključeva; kibernetička sigurnost; elektroenergetski sustav; protokol
• Keywords (english): IEC 61850; libIEC61850; IEC 62351; management of cryptographic keys; distribution of cryptographic keys; cybersecurity; power system; protocol
• Language: croatian
• URN:NBN: urn:nbn:hr:168:115407
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-10-11 10:54:33