CoChat
Sign Up
Cited by 272Smart Grid Security and ResilienceCybersecurity and Cyber Warfare StudiesInformation and Cyber Security

The DOI matches its Crossref record; 5 of the 5 references it cites were found in a registry or an index.

Ukraine cyber-induced power outage: Analysis and practical mitigation strategies

Whitehead, David E., Owens, Kevin, Gammel, Dennis, Smith, Jess·2017·2017 70th Annual Conference for Protective Relay Engineers (CPRE)
DOI 10.1109/cpre.2017.8090056
Open this paper in CoChat — free account

Abstract

On December 23, 2015, a “temporary malfunction of the power supply” in three provinces in Ukraine resulted in power outages that lasted up to six hours and affected 225,000 customers. Following the event, an investigation identified evidence that several regional Ukraine power control systems had been compromised by cyber attacks. This was the first publicly documented successful cyber attack on an electric utility's control system. Both asset owners and government officials around the world now are asking, “What happened and could a similar cyber attack happen in our control systems?” This paper provides an analysis of the Ukraine cyber attack, including how the malicious actors gained access to the control system, what methods the malicious actors used to explore and map the control system, a detailed description of the December 23, 2015 attacks, and methods used by the malicious actors to erase their activities and make remediation more difficult. We then present a detailed description of securing utility power system control systems based on best practices, including control system network design, whitelisting techniques, monitoring and logging, and personnel education. The paper concludes with a discussion of mitigation methods and recommendations that would have protected the Ukraine control system and alerted personnel in advance of the cyber attack.

Overview

Integrity signals

Registry

Crossref · 10.1109/cpre.2017.8090056

Cites

5 of 5 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Citations

Cites

Show all 5 references

Research works printed but not linked: 14

  1. polityuk, 2016, Ukraine Sees Russian Hand in Cyber Attacks on Power Grid
  2. 0, Cyber Attacks on the Ukrainian Grid: What You Should Know, iSIGHT Partners
  3. oman, 2001, Safeguarding IEDs, Substations, and SCADA Systems Against Electronic Intrusions, Proceedings of the 3rd Annual Western Power Delivery Automation Conference
  4. 2015, Critical Infrastructure Protection V
  5. smith, 2016, Defense in Depth Security for Industrial Control Systems, Proceedings of the Electricity Engineers' Association Conference & Exhibition
  6. zetter, 2016, Inside the cunning unprecedented hack of Ukraine's power grid
  7. 2016, The Work Group to Study the Causes of the Temporary Malfunction of Power Supply Companies, Which Took Place December 23, 2015, Ukrainian Ministry of Energy and Coal
  8. 2016, Advisory (ICSA-16-152-01) Moxa UC-7408-LX-Plus Firmware Overwrite Vulnerability
  9. 2016, Cyber-Attack Against Ukrainian Critical Infrastructure - Alert (IR-ALERT-H-16-056-01)
  10. polityuk, 0, Exclusive: Hackers May Have Wider Access to Ukrainian Industrial Facilities, Reuters January 2016
  11. 2016, Analysis of the Cyber Attack on the Ukrainian Power Grid, SANS and E-ISAC, 18
  12. 2016, Energy liquidate the consequences of a major accident in the Carpathian region, Prykarpattiaoblenergo Corporate Web Page
  13. 2016, Chernivtsioblenergo also suffered cyber attacks from Russia
  14. kremez, 2016, APT Malware Analysis: BlackEnergy, ?: o ? aToKl Excel VBA Dropper, viewed August 23

Cited by

Sorted by citations

Items 101–200 of 272

Related

See all

Metadata

Authors
Whitehead, D. E., Owens, K., Gammel, D., & Smith, J.
Affiliations
Schweitzer Engineering Laboratories (United States) (US)
Venue
2017 70th Annual Conference for Protective Relay Engineers (CPRE)
Publisher
IEEE
Published
2017-04
Pages
1-8
DOI
10.1109/cpre.2017.8090056
OpenAlex
W2766130346
Cited by
272
References
5
Citations by year
2026: 43 · 2025: 39 · 2024: 53 · 2023: 45 · 2022: 28 · 2021: 23 · 2020: 23 · 2019: 10 · 2018: 6 · 2017: 2
FWCI
17.13
Type
conference paper
Language
en
Open access
closed
Locations
Conference for Protective Relay Engineers (publishedVersion)
Topics
  • Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
  • Social Sciences › Political Science and International Relations › Cybersecurity and Cyber Warfare Studies
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
Keywords
power outages, control system security, whitelisting, network design, attack mitigation, critical infrastructure protection

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review