SealedGRID: Secure and Interoperable Platform for Smart GRID Applications

Abstract

Recent advancements in information and communication technologies (ICT) have improved the power grid, leading to what is known as the smart grid, which, as part of a critical economic and social infrastructure, is vulnerable to security threats from the use of ICT and new emerging vulnerabilities and privacy issues. Access control is a fundamental element of a security infrastructure, and security is based on the principles of less privilege, zero-trust, and segregation of duties. This work addresses how access control can be applied without disrupting the power grid’s functioning while also properly maintaining the security, scalability, and interoperability of the smart grid. The authentication in the platform presumes digital certificates using a web of trust. This paper presents the findings of the SealedGRID project, and the steps taken for implementing Attribute-based access control policies specifically customized to the smart grid. The outcome is to develop a novel, hierarchical architecture composed of different licensing entities that manages access to resources within the network infrastructure. They are based on well-drawn policy rules and the security side of these resources is placed through a context awareness module. Together with this technology, the IoT is used with Big Data (facilitating easy handling of large databases). Another goal of this paper is to present implementation and evaluations details of a secure and scalable security platform for the smart grid.

Cybersecurity in Power Grids: Challenges and Opportunities

“…While the increasing digitalization of power grids is necessary to deal with changing power demands and generation, it raises fundamental security challenges, especially when considering that power grids are an essential part of critical infrastructure [ 2 , 3 , 4 , 5 ]. In the following, we introduce and highlight the most important challenges or mechanisms in electrical power grids impacting cybersecurity.…”

“…As a result, more networking is introduced, creating a wider attack space for attackers. In this paper, we highlighted resulting fundamental security problems and attack vectors, which still have to be addressed in the coming years in order to maintain a high level of security and availability of power grids as a critical infrastructure [ 2 , 3 , 4 , 5 ].…”

“…Despite its importance to modern society, the energy sector has adapted slower than other industries to digital technology due to its size and need for high system availability. This is also reflected by a legislative point of view, with power grids being classified as critical infrastructure in many countries [ 2 , 3 , 4 , 5 ]. Because of the need for more efficiency, digital technology gets more widespread, and new technologies in the energy grid heavily rely on high-frequency monitoring cycles and adaptation to bottlenecks in the grid [ 6 ].…”

“…However, extending the grid by adding new lines is prohibitively expensive and often slowed down, e.g., by regulations or resistance of residents. Fortunately, digital technology can aid in better utilizing the existing grid, leading to an increased deployment of digital technology to control, monitor, and maintain transmission and distribution of power [ 2 , 11 ].…”

“…This increasing use of digital technology requires more and more networking capabilities and connects previously isolated components with larger communication networks [ 12 , 13 , 14 ], resulting in a large variety of new dataflows [ 15 ]. The resulting increasing interconnection of power grids, which constitute critical infrastructure [ 2 , 3 , 4 , 5 , 16 ] requiring special protection, raises severe security concerns [ 17 ]: Protocols and systems originally developed for power grids were not designed with security in mind. Yet, these systems are still used alongside modern technology and increasingly exposed to outside networks, such as the Internet.…”