PowerDuck: A GOOSE Data Set of Cyberattacks in Substations

Zenodo (CERN European Organization for Nuclear Research)

Abstract

A recorded GOOSE data set as described in Sven Zemanek, Immanuel Hacker, Konrad Wolsing, Eric Wagner, Martin Henze, and Martin Serror. 2022. PowerDuck: A GOOSE Data Set of Cyberattacks in Substations. In Cyber Security Experimentation and Test Workshop (CSET ’22), August 8, 2022, Virtual, CA, USA. ACM, New York, NY, USA, 5 pages. https://doi.org/10.1145/3546096.3546102 The data set contains network traces of GOOSE communication recorded in a physical substation testbed. Further, it includes recordings of various scenarios with and without the presence of attacks. All network packets originating from the attacker are clearly labeled as such to facilitate their identification using the Industrial Protocol Abstraction Layer (IPAL) format. We thus envision PowerDuck improving and complementing existing data sets of substations, which are often generated synthetically, and thus aim to enhance the security of power grids.

Authors 6

1. Sven Zemanek

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE

2. Immanuel Hacker Aachen

   RWTH Aachen University · Fraunhofer Institute for Applied Information Technology

   Affiliation as printed

   RWTH Aachen University & Fraunhofer FIT

3. Konrad Wolsing Aachen Fraunhofer FKIE &

   RWTH Aachen University · Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE & RWTH Aachen University

4. Eric Wagner Aachen Fraunhofer FKIE &

   RWTH Aachen University · Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE & RWTH Aachen University

5. Martin Henze Aachen

   RWTH Aachen University · Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   RWTH Aachen University & Fraunhofer FKIE

6. Martin Serror

   Fraunhofer Institute for Communication, Information Processing and Ergonomics

   Affiliation as printed

   Fraunhofer FKIE