AI 中文总结
本文提出工作在OSI传输层的QUIC-TRIP透明安全方法，通过三重冗余防御保障变电站R-GOOSE通信安全，在低延迟下实现对DoS攻击的弹性防护，平衡了防御能力与带宽开销。
AI 中文摘要
现代电力系统依赖可路由通用面向对象变电站事件（R-GOOSE）等实时变电站通信协议实现关键控制与保护功能，但这些协议常缺乏内置安全特性，优先保障可用性而非保密性与完整性，易受虚假数据注入和拒绝服务（DoS）攻击，且在广域网或公共网络传输时漏洞加剧。应对此类网络威胁是遵守美国能源部（DOE）纵深防御与零信任等安全指令的必要要求。本文提出QUIC-TRIP，一种适用于低延迟IP基工业通信的透明安全方法，工作在开放系统互连（OSI）传输层（第4层），封装并保护数据流且不影响现有协议端点运行。法兰克福至阿姆斯特丹通信路径的基线往返时间（RTT）测试显示，QUIC-TRIP所用底层传输层代理平均RTT低于OpenVPN，仅比集成数据报传输层安全（DTLS）1.2高2.88%（即使启用DTLS会话复用）。针对R-GOOSE通信的DoS洪泛测试中，QUIC-TRIP通过三条不同路径透明传输流量，转发最早到达的重复报文并丢弃后续副本，形成三重冗余防御方案，每条启用的代理路径通信开销为32.18%，为时间敏感电网操作提供了弹性与带宽成本间的可控权衡。
英文摘要
Modern power systems rely on real-time substation communication protocols, such as the Routable Generic Object-Oriented Substation Event (R-GOOSE), for critical control and protection functions. However, these protocols often lack built-in security features and prioritize availability over confidentiality and integrity, making them susceptible to false data injection and denial-of-service attacks. This vulnerability is exacerbated when communications are transmitted over wide-area or public networks. Addressing these cyber threats is essential to comply with current security mandates, including the DOE's defense-in-depth and zero-trust guidelines. This paper introduces QUIC-TRIP, a transparent security methodology for low-latency IP-based industrial communications. By operating at the Open Systems Interconnection (OSI) Transport Layer (Layer 4), the solution encapsulates and protects data flows without affecting the operation of existing protocol endpoints. Baseline echo Round-Trip Time (RTT) results over a Frankfurt-Amsterdam communication path show that the underlying transport-layer proxy used by QUIC-TRIP achieves a lower average RTT than OpenVPN and only 2.88% higher average RTT than integrated DTLS 1.2, even with DTLS session reuse. We evaluate the resilience of QUIC-TRIP multipath communication under DoS flooding by securing R-GOOSE communications. In these tests, traffic is transparently delivered through three different paths, and QUIC-TRIP forwards the earliest-arriving duplicate while discarding later copies. The framework provides a triple-redundant defense scheme with a measured communication overhead of 32.18% per enabled proxied path, offering a bounded trade-off between resilience and bandwidth cost for time-critical grid operations.
CommentsIEEE SmartGridComm 2026
