Security Monitoring of the Microgrid Using IEC 62351-7 Network and System Management

Microgrids, as one of the major components of the smart grid, are among the crucial pillars of building a distributed and reliable energy infrastructure system. Therefore, ensuring the secure and attack-resilient operation of microgrids paves the way toward reaching end-to-end security in the future smart grid. In this paper, we present the first design and implementation of a Network and System Management (NSM) security monitoring platform for microgrids in accordance with the specifications of the IEC 62351-7:2017 standard. The security monitoring platform is deployed in a real-time Hardware-In-the-Loop (HIL) smart grid co-simulation testbed on which a microgrid model is simulated. A hybrid rule-based and machine learning anomaly detection scheme using Long Short-Term Memory (LSTM) is developed to detect attacks targeting the microgrid. To evaluate the effectiveness of the NSM security monitoring platform, attacks are simulated against the micro-grid. The results obtained from these simulations demonstrate the strengths and gaps of NSM security monitoring.