A testbed for evaluating if and how process-aware monitoring may increase the security of decentralized SCADA networks in power grids is presented. The testbed builds on the co-simulation framework Mosaik, and co-simulates in an integrated way, the power distribution network on different voltage levels, as well as the control network (Modbus/TCP). The existing simulators were extended to allow topology changes, and a controller (RTU) simulator connected to a SCADA server enabling remote control was implemented. Using the developed testbed, a recently proposed local monitoring approach was investigated. The results show that for so-called interlocks the proposed monitoring approach prevents the execution of 33.3% of the commands, that would result in an unsafe state of the power distribution grid. Furthermore, it is shown that unsafe transformer tap positions can also be avoided. To illustrate the relevance and importance of the proposed testbed, a detailed comparison of related work on process-aware intrusion detection approaches and testbeds combining (parts of) the control network and the power grid is provided.

中文翻译：

---

用于在智能电网中本地监控SCADA系统的集成测试平台

提出了用于评估过程感知监视是否以及如何提高电网中分散式SCADA网络安全性的测试平台。该测试平台建立在Mosaik协同仿真框架的基础上，并以集成方式协同仿真不同电压等级的配电网络以及控制网络（Modbus / TCP）。现有的模拟器进行了扩展以允许拓扑更改，并且实施了连接到SCADA服务器的控制器（RTU）模拟器，以实现远程控制。使用开发的测试平台，研究了最近提出的本地监视方法。结果表明，对于所谓的互锁，所提出的监视方法阻止了33.3％的命令执行，这将导致配电网处于不安全状态。此外，结果表明，还可以避免不安全的变压器抽头位置。为了说明所提出的测试平台的相关性和重要性，提供了有关过程感知入侵检测方法和结合了控制网络和电网（部分）的测试平台的相关工作的详细比较。