Recent Development in Smart Grid Authentication Approaches: A Systematic Literature Review
---
paper_title: Secure Device Authentication Mechanisms for the Smart Grid-Enabled Home Area Networks

paper_content:

In this paper, we propose secure and intuitive device authentication techniques for the Smart Grid enabled Home Area Networks (HANs). We assume a distributed architecture for the HAN in which the smart appliances can communicate both with the smart meter and the gateway. Further, operating schedules of the smart appliances are controlled by the gateway based on the pricing and control messages from the smart meter. We propose three different authentication mechanisms for devices in the HAN: (1) between the gateway and the smart meter, (2) between the smart appliances and the HAN, and (3) between the transient devices and the HAN. We show that the proposed mechanisms are resilient against insider attackers performing serious attacks such as man-in-the-middle or impersonation during device authentication. Further, the proposed authentication mechanisms are intuitive and require no (or minimum) user effort.
---
paper_title: Security and Reliability Perspectives in Cyber-Physical Smart Grids

paper_content:

Information and communication technologies (ICTs) are widely deployed in electric power systems to improve system monitoring, control, protection, and data processing capabilities. However, power systems’ dependency on cyber infrastructure inevitably increases the risk of system degradation resulting from cyber-attacks. In addition, the intrinsic failures of cyber elements and the design defects of cyber-physical system architecture affect power system reliability. These two concerns are generally termed as “cyber-physical security” and “cyberphysical reliability”, respectively. While the two topics have received considerable research efforts in recent years, their distinctions still remain obscure among researchers. This paper succinctly summarizes the scopes, approaches, and major advancements in the two research areas with representative examples provided to clarify their distinctions. By revealing the inherent features of cyber-physical security and cyber-physical reliability in smart grids, this paper is written with the objective of facilitating future studies in these two areas.
---
paper_title: Against Data Attacks on Smart Grid Operations: Attack Mechanisms and Security Measures

paper_content:

This chapter provides a survey and some highlights of recent developments on cyber security issues related to smart grid operations. In particular, we present data attack models and attack mechanisms on system state estimation, generation dispatch, and market operations. Security measures via sensor protection and data authentication are discussed. Although presented in the context of a smart grid, the main ideas are applicable to general cyber physical systems.
---
paper_title: Comprehensive Performance Evaluation Strategy for Communication Networks Selection in Smart Grid

paper_content:

AbstractDifferent communication networks are used in the different application environment of the smart grid. So, how to effectively select the communication networks with the optimal comprehensive performance is an important issue for the power management corporations. A novel comprehensive performance evaluation based on Exponential Scale Analytic Hierarchy Process ESAHP and Grey Analytic Hierarchy Process GAHP for the communication networks selection is proposed in the electricity information acquisition system. The ESAHP is used to calculate the weight of each communication performance index and the economic performance index, and the GAHP is adopted to evaluate the economic cost of the different communication modes. The optimal comprehensive communication model can be selected by comprehensively comparing the communication performance and the economic cost. The test results show that the assessment model can effectively evaluate the comprehensive performance of the different communication networks selection in the electricity information acquisition system of the smart grid.
---
paper_title: Review of one-time signatures for multicast authentication in smart grid

paper_content:

One-time signatures are known to be one of the most promising solution for time-critical multicast authentication in environments with resource-constrained devices such as smart grid. There have been several solutions for multicast applications and TV-OTS has been known to be the most efficient scheme so far. However, there still exists several challenges for one-time signatures to be deployed in practice. We review existing onetime signatures for multicast authentication and address several challenges such as key management and storage cost problems that can inevitably arise when they are actually deployed in practice.
---
paper_title: Information Security in the Smart Grid: Survey and Challenges

paper_content:

The Smart Grid is a revolutionary regime of existing power grids, which is more efficient, reliable, clean and intelligent. However, Smart Grid is facing serious cyber security issues, as millions of intelligent electronic devices are inter-connected by communication networks, which has significant impact on the reliability and usability of the Smart Grid. In this paper, the security threats from both software and hardware levels are reviewed. According to the specific features of Smart Grid, various countermeasures are discussed, which can be the solution for the cyber security issues of Smart Grid. This paper emphasizes the threats and countermeasures from hardware level. Future works based on the discussion is also provided.
---
paper_title: Systematic review in software engineering: where we are and where we should be going

paper_content:

In 2004 Kitchenham et al. first proposed the idea of evidence-based software engineering (EBSE). EBSE requires a systematic and unbiased method of aggregating empirical studies and has encouraged software engineering researches to undertake systematic literature reviews (SLRs) of Software Engineering topics and research questions. As software engineers began to use the SLR technology, they also began to comment on the SLR process itself. Brereton et al (2007) was one of the first papers that commented on issues connected with performing SLRs and many such papers have followed since covering topics such as: The use of SLRs in education; Experiences of novices using SLRs; The adoption of mapping and scoping studies; The repeatability of SLRs; Improving the search and selection processes; Quality assessment of primary studies; Improving aggregation processes. It therefore seems appropriate to identify the current status of such studies in software engineering, and identify whether there is evidence for revising and/or extending the guidelines for performing systematic literature reviews (Kitchenham and Charters, 2007). This keynote will report the current results of an ongoing systematic literature review that aims: A1: To identify and categorise papers investigating the SLR process and the claims relating to that process; A2: To identify the extent to which the claims of repeatability, lack of bias, and openness are supported; A3: To identify any areas where current guidelines need to be amended or extended to reflect current knowledge of applying SLRs in the context of software engineering.
---
paper_title: Distributed Monitoring for Prevention of Cascading Failures in Operational Power Grids

paper_content:

Electrical power grids are vulnerable to cascading failures that can lead to large blackouts. Detection and prevention of cascading failures in power grids is impor- tant. Currently, grid operators mainly monitor the state (loading level) of individual components in power grids. The complex architecture of power grids, with many interdependencies, makes it difficult to aggregate data provided by local compo- nents in a timely manner and meaningful way: monitoring the resilience with re- spect to cascading failures of an operational power grid is a challenge. This paper addresses this challenge. The main ideas behind the paper are that (i) a robustness metric based on both the topology and the operative state of the power grid can be used to quantify power grid robustness and (ii) a new proposed a distributed computation method with self-stabilizing properties can be used to achieving near real-time monitoring of the robustness of the power grid. Our con- tributions thus provide insight into the resilience with respect to cascading failures of a dynamic operational power grid at runtime, in a scalable and robust way. Com- putations are pushed into the network, making the results available at each node, allowing automated distributed control mechanisms to be implemented on top.
---
paper_title: PALDA: Efficient privacy-preserving authentication for lossless data aggregation in Smart Grids

paper_content:

Smart grid is a modern power grid that uses two-way communications between the control center and smart meters to improve efficiency, reliability, flexibility, security, and safety of the grid. Security is one of the critical requirements in smart grid, especially privacy and authentication due to the increase in the point of attacks and the fact that energy usage data can reveal personal information. Moreover, since millions of smart meters create a huge amount of data, a privacy-preserving authentication scheme in smart grid should not only be secure but also efficient in terms of communication and computation cost. In this paper, we propose an efficient Privacy-preserving Authentication for Lossless Data Aggregation scheme (PALDA) that guarantees privacy-preserving for two main energy usage collection scenarios: (1) collecting total sum of energy usage for a group of smart meters and (2) collecting individual energy usage of individual smart meters for a desired period of time. PALDA uses a homomorphic encryption algorithm to reduce communication overhead and spread computation overhead over time. Our numerical analysis result shows that PALDA significantly reduces the computation overhead in comparisons with existing work.
---
paper_title: A Secure Smart-Card-based Password Authenticated Key Agreement Scheme in Multi-server Environments

paper_content:

Remote user authentication is used to validate the legitimacy of a remote log-in user. Due to the rapid growth of computer community, many network architectures are becoming multi-server based. Recently, there have been many remote password authentication schemes proposed for securing multi-server environments. These schemes used either a nonce or a timestamp technique to prevent the replay attack. However, using the nonce technique to withstand the replay attack is potentially susceptible to the man-in-the-middle attack. Alternatively, when employing the timestamp method to secure remote password authentication, it will encounter the difficulty of implementing time synchronization. In order to solve both the above two issues, this paper proposes a self-verified timestamp technique to not only securely achieve password authenticated key agreement but also avoid the difficulty of implementing time synchronization in multi-server environments. On the other hand, the function of service period management can allow servers to update the list of illegal users easily and periodically. Therefore, we also further develop the scheme of service period management in this paper.
---
paper_title: An elliptic curve cryptography based lightweight authentication scheme for smart grid communication

paper_content:

An evolved grid system, Smart Grid, enables appropriate adjustments in the amount of electricity generation by providing the capability to monitor the consumption behavior of customers. This advance grid system can help to promote cultural heritage because it is responsible to provide un-interruptible and reliable power supply in smart way. Smart grid is one of the key component for enabling smart cities and obviously, any city with more smart amenities will ultimately attract visitors to come and visit rich heritage. In smart grid, Supervisory Control and Data Acquisition (SCDA) system is responsible for keeping the underlying communication secure between substations and corresponding control center. While communication between customers and substations needs more enhancements as the existing protocols do not meet the comprehensive security requirements of smart grid. Due to the complex nature of smart grid and diverse security requirements, designing a suitable authentication scheme is a challenging task. For delay sensitive networks like smart grid, an ideal authentication scheme should withstand against all known security attacks, involving lightweight operations with trivial computations. ECC provides same security level with much less key sizes as compared with other security techniques such as RSA, DSA and DH. Keeping in mind the complex and delay sensitive nature of smart grid, a lightweight ECC based authentication scheme is proposed here. The proposed scheme not only provides mutual authentication with low computation and communication cost but also withstand against all known security attacks. We have designed an authentication scheme for smart grid communication.The proposed scheme does not require the trusted third party during authentication phase.The scheme along with traditional security requirements also provides anonymity and privacy.Proposed scheme is secure under threat model of automated tool ProVerif.
---
paper_title: Guidelines for including the grey literature and conducting multivocal literature reviews in software engineering

paper_content:

Abstract Context A Multivocal Literature Review (MLR) is a form of a Systematic Literature Review (SLR) which includes the grey literature (e.g., blog posts, videos and white papers) in addition to the published (formal) literature (e.g., journal and conference papers). MLRs are useful for both researchers and practitioners since they provide summaries both the state-of-the art and –practice in a given area. MLRs are popular in other fields and have recently started to appear in software engineering (SE). As more MLR studies are conducted and reported, it is important to have a set of guidelines to ensure high quality of MLR processes and their results. Objective There are several guidelines to conduct SLR studies in SE. However, several phases of MLRs differ from those of traditional SLRs, for instance with respect to the search process and source quality assessment. Therefore, SLR guidelines are only partially useful for conducting MLR studies. Our goal in this paper is to present guidelines on how to conduct MLR studies in SE. Method To develop the MLR guidelines, we benefit from several inputs: (1) existing SLR guidelines in SE, (2), a literature survey of MLR guidelines and experience papers in other fields, and (3) our own experiences in conducting several MLRs in SE. We took the popular SLR guidelines of Kitchenham and Charters as the baseline and extended/adopted them to conduct MLR studies in SE. All derived guidelines are discussed in the context of an already-published MLR in SE as the running example. Results The resulting guidelines cover all phases of conducting and reporting MLRs in SE from the planning phase, over conducting the review to the final reporting of the review. In particular, we believe that incorporating and adopting a vast set of experience-based recommendations from MLR guidelines and experience papers in other fields have enabled us to propose a set of guidelines with solid foundations. Conclusion Having been developed on the basis of several types of experience and evidence, the provided MLR guidelines will support researchers to effectively and efficiently conduct new MLRs in any area of SE. The authors recommend the researchers to utilize these guidelines in their MLR studies and then share their lessons learned and experiences.
---

Title: Recent Development in Smart Grid Authentication Approaches: A Systematic Literature Review

Section 1: Introduction
Description 1: Describe the background, objectives, and significance of smart grid authentication, and outline the motivation for conducting the systematic literature review.

Section 2: Related Work
Description 2: Summarize the existing literature and different methods used in previous studies for smart grid authentication and the observed gaps that this review aims to address.

Section 3: Systematic Literature Approach
Description 3: Explain the methodology of the systematic literature review, including the research questions, search strategy, inclusion and exclusion criteria, and the process of study selection and data extraction.

Section 4: Digital Libraries Investigation
Description 4: Detail the investigation process conducted on selected digital libraries, describe the search keywords, and outline the process for refining and selecting relevant articles for the review.

Section 5: Quality Assessment
Description 5: Provide criteria for evaluating the selected articles' quality to ensure the validity and rigor of the included studies.

Section 6: Information Extraction
Description 6: Detail the extraction process, focusing on key information related to the research questions, and categorize authentication approaches used between smart grid components.

Section 7: SG Authentication Approaches (RQ1)
Description 7: Analyze and categorize the different authentication techniques identified in the selected studies, including cryptographic-based, password-based, hardware-based, signature-based, and biometric-based approaches.

Section 8: SG Components for Authentication Techniques (RQ2)
Description 8: Analyze which smart grid components and entities (WAN, NAN, HAN) are targeted by the identified authentication techniques and the reasons for prioritizing certain components.

Section 9: The Mitigated Threat of Authentication Mechanism (RQ3)
Description 9: Classify and analyze the types of threats and attacks (e.g., impersonation, eavesdropping, replay, MiTM) that the identified authentication approaches mitigate.

Section 10: Resolving of Review Bias
Description 10: Explain the steps taken to minimize bias during the review process and ensure the reliability of the findings.

Section 11: Discussion and Conclusions
Description 11: Summarize the importance of smart grid authentication, the findings from the review, and the implications for future research and practice in the field of smart grid security.

Section 12: Lessons Learned for Developing Smart Grid Authentication
Description 12: Discuss the challenges, requirements, and lessons learned for developing effective smart grid authentication approaches based on the review.

Section 13: Direction for Future Studies
Description 13: Suggest areas for future research to build upon the findings of this review and explore additional aspects of smart grid security and privacy.