{"id":{"repo_id":"qu-belfast","oai_identifier":"oai:pure.qub.ac.uk/portal:studenttheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9"},"canonical_url":"https://search.dev.ndltd.org/etd/qu-belfast/oai:pure.qub.ac.uk/portal:studenttheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9","repository":{"repo_id":"qu-belfast","name":"Queen's University Belfast","base_url":"https://pureadmin.qub.ac.uk/ws/oai"},"display":{"title":"Reliable and secure information and communications systems for electrical utilities","abstract":"Commercial Off-The-Shelf (COTS) systems have become pervasive. The underlying technologies of these systems were developed before security was a priority. Using conventional approaches, it is not possible to mitigate these systems adequately for use in Critical Infrastructure (CI). <br/><br/>Some strategies have been considered for legacy sites. A novel approach to asset identification is considered. Restricting data flows is a solution for security issues in certain classes of applications and the data diode is an example of such an implementation. This has been demonstrated in a smart grid context using standardized phasor measurement data. To make this approach more scalable, an OpenFlow Software-Defined Network (SDN) may be used. Vulnerabilities in this approach are identified and the attack surface minimised. Configuration and change as a vector for vulnerability is mitigated by automating provisioning, based on IEC 61850 data models. This solution is then generalized for provisioning any NETCONF/YANG compatible network devices. <br/><br/>Finally, these ideas are combined in the concept of a software-defined node, where the core functionality of a processing device is separated from its data communications functionality. There is no access path between the core processor and the external network.","abstract_html":"Commercial Off-The-Shelf (COTS) systems have become pervasive. The underlying technologies of these systems were developed before security was a priority. Using conventional approaches, it is not possible to mitigate these systems adequately for use in Critical Infrastructure (CI). &lt;br/&gt;&lt;br/&gt;Some strategies have been considered for legacy sites. A novel approach to asset identification is considered. Restricting data flows is a solution for security issues in certain classes of applications and the data diode is an example of such an implementation. This has been demonstrated in a smart grid context using standardized phasor measurement data. To make this approach more scalable, an OpenFlow Software-Defined Network (SDN) may be used. Vulnerabilities in this approach are identified and the attack surface minimised. Configuration and change as a vector for vulnerability is mitigated by automating provisioning, based on IEC 61850 data models. This solution is then generalized for provisioning any NETCONF/YANG compatible network devices. &lt;br/&gt;&lt;br/&gt;Finally, these ideas are combined in the concept of a software-defined node, where the core functionality of a processing device is separated from its data communications functionality. There is no access path between the core processor and the external network.","abstract_has_math":false,"creators":["O'Raw, John Bourke"],"institution":"Queen's University Belfast","degree_name":"Doctor of Philosophy","degree_level":"Doctoral Thesis","degree_discipline":null,"degree_department":null,"school":null,"contributors":[],"advisors":["Laverty, David","Morrow, David"],"committee_chairs":[],"committee_members":[],"year":2020,"date_issued":"2020-12","date_published":"2020-12","updated_at":"2026-07-24T03:55:31Z","subjects":["Data Diode","IEC61850","SDN","SD-Node"],"languages":["eng"],"rights":[],"rights_urls":[],"identifier_entries":[{"key":"dc:identifier","label":"Identifier","values":["oai:pure.qub.ac.uk/portal:studenttheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9"],"render_values":[{"text":"oai:pure.qub.ac.uk/portal:studenttheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9","href":null,"code":true}]}]},"links":{"outbound_url":"https://pure.qub.ac.uk/en/studentTheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9","outbound_label":"Repository record","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor.advisor","label":"Advisor","values":["Laverty, David","Morrow, David"]},{"key":"dc:creator","label":"Author","values":["O'Raw, John Bourke"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2020-12"]},{"key":"dc:date.issued","label":"Date","values":["2020-12"]},{"key":"dc:publisher.department","label":"Dc Publisher Department","values":["School of Electronics, Electrical Engineering and Computer Science"]},{"key":"dc:publisher.institution","label":"Dc Publisher Institution","values":["Queen's University Belfast"]},{"key":"dc:relation.isreferencedby","label":"Dc Relation Isreferencedby","values":["https://pure.qub.ac.uk/en/studentTheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9"]},{"key":"dc:type","label":"Dc Type","values":["Thesis"]},{"key":"dc:type.qualificationlevel","label":"Dc Type Qualificationlevel","values":["Doctoral Thesis"]},{"key":"dc:type.qualificationname","label":"Dc Type Qualificationname","values":["Doctor of Philosophy"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Data Diode","IEC61850","SDN","SD-Node"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["eng"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["oai:pure.qub.ac.uk/portal:studenttheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9","https://pure.qub.ac.uk/en/studentTheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9"]},{"key":"dc:identifier.uri","label":"Identifier URI","values":["https://pure.qub.ac.uk/files/662250280/Reliable_and_secure_information_and_communications_systems_for_electrical_utilities.pdf"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description.abstract","label":"Abstract","values":["Commercial Off-The-Shelf (COTS) systems have become pervasive. The underlying technologies of these systems were developed before security was a priority. Using conventional approaches, it is not possible to mitigate these systems adequately for use in Critical Infrastructure (CI). <br/><br/>Some strategies have been considered for legacy sites. A novel approach to asset identification is considered. Restricting data flows is a solution for security issues in certain classes of applications and the data diode is an example of such an implementation. This has been demonstrated in a smart grid context using standardized phasor measurement data. To make this approach more scalable, an OpenFlow Software-Defined Network (SDN) may be used. Vulnerabilities in this approach are identified and the attack surface minimised. Configuration and change as a vector for vulnerability is mitigated by automating provisioning, based on IEC 61850 data models. This solution is then generalized for provisioning any NETCONF/YANG compatible network devices. <br/><br/>Finally, these ideas are combined in the concept of a software-defined node, where the core functionality of a processing device is separated from its data communications functionality. There is no access path between the core processor and the external network."]},{"key":"dc:title","label":"Title","values":["Reliable and secure information and communications systems for electrical utilities"]}]}],"canonical_facts":{"dc:contributor.advisor":["Laverty, David","Morrow, David"],"dc:creator":["O'Raw, John Bourke"],"dc:date":["2020-12"],"dc:date.issued":["2020-12"],"dc:description.abstract":["Commercial Off-The-Shelf (COTS) systems have become pervasive. The underlying technologies of these systems were developed before security was a priority. Using conventional approaches, it is not possible to mitigate these systems adequately for use in Critical Infrastructure (CI). <br/><br/>Some strategies have been considered for legacy sites. A novel approach to asset identification is considered. Restricting data flows is a solution for security issues in certain classes of applications and the data diode is an example of such an implementation. This has been demonstrated in a smart grid context using standardized phasor measurement data. To make this approach more scalable, an OpenFlow Software-Defined Network (SDN) may be used. Vulnerabilities in this approach are identified and the attack surface minimised. Configuration and change as a vector for vulnerability is mitigated by automating provisioning, based on IEC 61850 data models. This solution is then generalized for provisioning any NETCONF/YANG compatible network devices. <br/><br/>Finally, these ideas are combined in the concept of a software-defined node, where the core functionality of a processing device is separated from its data communications functionality. There is no access path between the core processor and the external network."],"dc:identifier":["oai:pure.qub.ac.uk/portal:studenttheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9","https://pure.qub.ac.uk/en/studentTheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9"],"dc:identifier.uri":["https://pure.qub.ac.uk/files/662250280/Reliable_and_secure_information_and_communications_systems_for_electrical_utilities.pdf"],"dc:language":["eng"],"dc:publisher.department":["School of Electronics, Electrical Engineering and Computer Science"],"dc:publisher.institution":["Queen's University Belfast"],"dc:relation.isreferencedby":["https://pure.qub.ac.uk/en/studentTheses/42feb0d0-7d6e-4f86-bbde-e043710ee9c9"],"dc:subject":["Data Diode","IEC61850","SDN","SD-Node"],"dc:title":["Reliable and secure information and communications systems for electrical utilities"],"dc:type":["Thesis"],"dc:type.qualificationlevel":["Doctoral Thesis"],"dc:type.qualificationname":["Doctor of Philosophy"]},"updated_at":"2026-07-24T03:55:31Z"}