{"id":"https://openalex.org/W4396877687","doi":"https://doi.org/10.1109/tim.2024.3400328","title":"Measuring and Improving the Security Posture of IEC 61850 Substations Against Supply Chain Attacks","display_name":"Measuring and Improving the Security Posture of IEC 61850 Substations Against Supply Chain Attacks","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4396877687","doi":"https://doi.org/10.1109/tim.2024.3400328"},"language":"en","primary_location":{"id":"doi:10.1109/tim.2024.3400328","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tim.2024.3400328","pdf_url":null,"source":{"id":"https://openalex.org/S10892749","display_name":"IEEE Transactions on Instrumentation and Measurement","issn_l":"0018-9456","issn":["0018-9456","1557-9662"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Instrumentation and Measurement","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061912757","display_name":"Onur Duman","orcid":"https://orcid.org/0000-0002-2489-8981"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Onur Duman","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-2489-8981","affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088493251","display_name":"Azadeh Tabiban","orcid":"https://orcid.org/0000-0001-6235-2317"},"institutions":[{"id":"https://openalex.org/I46247651","display_name":"University of Manitoba","ror":"https://ror.org/02gfys938","country_code":"CA","type":"education","lineage":["https://openalex.org/I46247651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Azadeh Tabiban","raw_affiliation_strings":["Department of Computer Science, University of Manitoba, Winnipeg, MB, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6235-2317","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Manitoba, Winnipeg, MB, Canada","institution_ids":["https://openalex.org/I46247651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100730397","display_name":"Lingyu Wang","orcid":"https://orcid.org/0000-0002-7441-7541"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lingyu Wang","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-7441-7541","affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3015-3043","affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.9008,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.85255899,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"73","issue":null,"first_page":"1","last_page":"20"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9595999717712402,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9477999806404114,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iec-61850","display_name":"IEC 61850","score":0.862947940826416},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.672192394733429},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.511776864528656},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.45552927255630493},{"id":"https://openalex.org/keywords/reliability-engineering","display_name":"Reliability engineering","score":0.4513968825340271},{"id":"https://openalex.org/keywords/chain","display_name":"Chain (unit)","score":0.44943392276763916},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4155520796775818},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.40120017528533936},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.37332701683044434},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.3351202607154846},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2990880012512207},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.23028051853179932},{"id":"https://openalex.org/keywords/mechanical-engineering","display_name":"Mechanical engineering","score":0.11860615015029907}],"concepts":[{"id":"https://openalex.org/C2778907243","wikidata":"https://www.wikidata.org/wiki/Q168160","display_name":"IEC 61850","level":3,"score":0.862947940826416},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.672192394733429},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.511776864528656},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45552927255630493},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.4513968825340271},{"id":"https://openalex.org/C199185054","wikidata":"https://www.wikidata.org/wiki/Q552299","display_name":"Chain (unit)","level":2,"score":0.44943392276763916},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4155520796775818},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.40120017528533936},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.37332701683044434},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.3351202607154846},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2990880012512207},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.23028051853179932},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.11860615015029907},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C1276947","wikidata":"https://www.wikidata.org/wiki/Q333","display_name":"Astronomy","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tim.2024.3400328","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tim.2024.3400328","pdf_url":null,"source":{"id":"https://openalex.org/S10892749","display_name":"IEEE Transactions on Instrumentation and Measurement","issn_l":"0018-9456","issn":["0018-9456","1557-9662"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Instrumentation and Measurement","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1508191694","https://openalex.org/W1971070850","https://openalex.org/W1985324839","https://openalex.org/W2002619227","https://openalex.org/W2008903039","https://openalex.org/W2009498872","https://openalex.org/W2012246208","https://openalex.org/W2022578767","https://openalex.org/W2044152003","https://openalex.org/W2054127354","https://openalex.org/W2091673436","https://openalex.org/W2097454848","https://openalex.org/W2103862045","https://openalex.org/W2121805588","https://openalex.org/W2126105956","https://openalex.org/W2290944024","https://openalex.org/W2336157635","https://openalex.org/W2488221070","https://openalex.org/W2700774434","https://openalex.org/W2741887078","https://openalex.org/W2757615817","https://openalex.org/W2919469235","https://openalex.org/W2950965276","https://openalex.org/W2982140757","https://openalex.org/W2990842415","https://openalex.org/W3015447433","https://openalex.org/W3021613070","https://openalex.org/W3036006868","https://openalex.org/W3043157652","https://openalex.org/W3127874901","https://openalex.org/W4214717370","https://openalex.org/W4214927702","https://openalex.org/W4220794850","https://openalex.org/W4285103546","https://openalex.org/W6635235395"],"related_works":["https://openalex.org/W2367739416","https://openalex.org/W2352028207","https://openalex.org/W1847012216","https://openalex.org/W2383397189","https://openalex.org/W2364323245","https://openalex.org/W1984507003","https://openalex.org/W2378142920","https://openalex.org/W2351977728","https://openalex.org/W2392964253","https://openalex.org/W2352466788"],"abstract_inverted_index":{"The":[0],"measurement":[1,23],"of":[2,17,68,85,99,172,218,249,266],"security":[3,22,57,117,170,247],"is":[4,26,136],"essential":[5],"for":[6,140,161,184],"defending":[7],"critical":[8],"infrastructures":[9],"like":[10],"smart":[11],"grid":[12],"substations":[13,173,186,250],"against":[14,174,251],"emerging":[15],"threats":[16],"supply":[18,38,175,229,252,258,268],"chain":[19,39,176,230,237,253,269],"attacks.":[20,177],"However,":[21],"in":[24,28,94,227],"general":[25],"still":[27],"its":[29],"infancy":[30],"and":[31,53,126,143,166,191,207,284,288],"especially":[32],"lacks":[33],"tool":[34],"support.":[35],"In":[36,150],"particular,":[37],"attacks":[40,63,231,254],"exploit":[41],"vulnerabilities":[42],"injected":[43],"into":[44],"devices":[45,70],"before":[46],"their":[47],"shipment":[48],"or":[49],"during":[50],"firmware":[51],"updates,":[52],"represent":[54],"a":[55,133,155,181,197],"significant":[56],"threat":[58],"to":[59,82,90,113,120,147,164,203],"substations.":[60],"Preventing":[61],"such":[62],"through":[64,280],"the":[65,97,169,189,216,225,246,264],"na\u00efve":[66],"solution":[67],"purchasing":[69],"only":[71],"from":[72,286],"trusted":[73],"vendors":[74],"may":[75,109,277],"not":[76,110],"always":[77],"be":[78,105,111,145,278],"feasible":[79,112],"(e.g.,":[80],"due":[81,119],"operational":[83,192],"constraints":[84],"an":[86],"operator":[87],"being":[88],"bound":[89],"particular":[91],"vendors).":[92],"Furthermore,":[93],"many":[95],"cases,":[96],"effectiveness":[98,217],"applying":[100,127],"ad-hoc":[101],"hardening":[102,129,156,182,212,260],"options":[103,130,261],"can":[104,144],"limited,":[106],"while":[107,131,187],"it":[108],"deploy":[114],"all":[115],"possible":[116],"mechanisms":[118],"budget":[121,135,190],"constraints.":[122,193],"Finally,":[123,271],"manually":[124,208],"assessing":[125],"different":[128],"respecting":[132],"given":[134],"usually":[137],"very":[138],"challenging":[139],"system":[141],"operators":[142,202],"prone":[146],"human":[148],"error.":[149],"this":[151],"paper,":[152],"we":[153,272],"develop":[154],"system,":[157],"namely":[158],"Hardening":[159],"Framework":[160],"Substations":[162],"(HFS),":[163],"measure":[165],"optimally":[167],"improve":[168],"posture":[171],"First,":[178],"HFS":[179,195,219,244],"provides":[180,196],"mechanism":[183],"securing":[185],"considering":[188],"Second,":[194],"visual":[198],"framework":[199],"that":[200,243],"allows":[201],"generate":[204],"attack":[205],"graphs":[206],"experiment":[209],"with":[210,256],"various":[211],"options.":[213],"We":[214],"validate":[215],"based":[220],"on":[221],"several":[222],"scenarios":[223],"including":[224],"case":[226],"which":[228],"are":[232],"mitigated":[233],"by":[234,262],"fixing":[235],"non-supply":[236],"vulnerabilities.":[238],"Our":[239],"simulation":[240],"results":[241],"demonstrate":[242],"improves":[245],"postures":[248],"even":[255],"limited":[257],"chain-related":[259],"reducing":[263],"number":[265],"successful":[267],"attackers.":[270],"discuss":[273],"how":[274],"our":[275],"work":[276],"improved":[279],"leveraging":[281],"existing":[282],"concepts":[283],"techniques":[285],"instrumentation":[287],"measurement.":[289]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}