SECPSIM: A Training Simulator for cyber-power infrastructure security

Vellaithurai, Ceeman; Srivastava, Anurag K.; Zonouz, Saman

doi:10.1109/smartgridcomm.2013.6687934

Cited by 8 publications

(6 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…An OTS includes a main process model and a simulated DCS that allows for performing a realistic hands-on training of normal operations, start-ups and shutdowns, as well as upsets and emergency situations (Komulainen et al, 2012). These authors and several others (Reinig et al, 1997;Balaton et al, 2013;Patle & Ahmad, 2013;Vellaithurai et al, 2013) claim that to improve the skills of operators, OTSs have been widely applied since the 1990s (Patle et al, 2014). Nevertheless, from a human factors perspective, it is unclear what rationale is used to decide when, how, and how often to integrate the OTS in the training.…”

Section: Recent Results From Learning Researchmentioning

confidence: 99%

Advanced Applications in Process Control and Training Needs of Field and Control Room Operators

Kluge

Nazir

Manca

2014

IIE Transactions on Occupational Ergonomics and Human Factors

View full text Add to dashboard Cite

adjustments (Emigholz, 1996). By contrast, the operators of modern industrial plants face different challenges due to handling, analyzing, and interpreting large amounts of distributed information simultaneously.Although some advanced control techniques (e.g., dynamic matrix control, model algorithmic control) had their origins in the industry from some enlightened development groups (e.g., Shell, IDCOM), the formalization and systemization of these techniques was conceived, conducted, and finalized by academia through a rather long incubation period (see Morari & Lee [1999] for a detailed review). Eventually, starting from the 1990s, the availability of robust software environments and fast hardware, both reasonably priced, allowed the seminal model-based techniques (still too theoretical and simplified) to be transposed into stable and complex algorithms, such as model predictive control (MPC) and real-time optimization (RTO;De Souza et al., 2010).MPC and RTO enabled the industries to implement models and solutions into their systems by optimizing the process parameters to maximize the production according to minimum energy usage, and/or minimum raw materials consumption, and/or minimum environmental impact. The growth and implementation of these optimization techniques can be judged by a prediction made by the ARC advisory group, that the RTO market will reach more than US$1.5 billion in 2015 (Abel, 2011).

show abstract

Section: Recent Results From Learning Researchmentioning

confidence: 99%

Advanced Applications in Process Control and Training Needs of Field and Control Room Operators

Kluge

Nazir

Manca

2014

IIE Transactions on Occupational Ergonomics and Human Factors

View full text Add to dashboard Cite

show abstract

“…To further decrease incident response times, it is recommended to keep the number of involved parties small, e.g., by operating own networks, andthus, thus, reduce the need for synchronization and communication during incident response [ 129 ]. Notably, proper preparation for cybersecurity incidents also requires to regularly train the response to cybersecurity incidents, e.g., using a corresponding training simulator [ 132 , 133 ]. To be valuable for training employees of grid operators, such training environments need to closely model typical process control network as found in power grids [ 17 , 134 ].…”

Section: Providing Cybersecurity For Interconnected Power Gridsmentioning

confidence: 99%

Cybersecurity in Power Grids: Challenges and Opportunities

Krause

Ernst

Klaer

et al. 2021

Sensors

View full text Add to dashboard Cite

Increasing volatilities within power transmission and distribution force power grid operators to amplify their use of communication infrastructure to monitor and control their grid. The resulting increase in communication creates a larger attack surface for malicious actors. Indeed, cyber attacks on power grids have already succeeded in causing temporary, large-scale blackouts in the recent past. In this paper, we analyze the communication infrastructure of power grids to derive resulting fundamental challenges of power grids with respect to cybersecurity. Based on these challenges, we identify a broad set of resulting attack vectors and attack scenarios that threaten the security of power grids. To address these challenges, we propose to rely on a defense-in-depth strategy, which encompasses measures for (i) device and application security, (ii) network security, and (iii) physical security, as well as (iv) policies, procedures, and awareness. For each of these categories, we distill and discuss a comprehensive set of state-of-the art approaches, as well as identify further opportunities to strengthen cybersecurity in interconnected power grids.

show abstract

“…To further decrease incident response times, it is recommended to keep the number of involved parties small, e.g., by operating own networks, and thus reduce the need for synchronization and communication during incident response [111]. Notably, proper preparation for cybersecurity incidents also requires to regularly train the response to cybersecurity incidents, e.g., using a corresponding training simulator [114,115]. To be valuable for training employees of grid operators, such training environments need to closely model typical process control network as found in power grids [12,116].…”

Section: Policies Procedures and Awarenessmentioning

confidence: 99%

Cybersecurity in Power Grids: Challenges and Opportunities

Krause,

Ernst,

Klaer

et al. 2021

Preprint

View full text Add to dashboard Cite

Increasing volatilities within power transmission and distribution force power grid operators to amplify their use of communication infrastructure to monitor and control their grid. The resulting increase in communication creates a larger attack surface for malicious actors. Indeed, cyber attacks on power grids have already succeeded in causing temporary, large-scale blackouts in the recent past.In this paper, we analyze the communication infrastructure of power grids to derive resulting fundamental challenges of power grids with respect to cybersecurity. Based on these challenges, we identify a broad set of resulting attack vectors and attack scenarios that threaten the security of power grids. To address these challenges, we propose to rely on a defense-in-depth strategy, which encompasses measures for (i) device and application security, (ii) network security, (iii) physical security, as well as (iv) policies, procedures, and awareness. For each of these categories, we distill and discuss a comprehensive set of state-of-the art approaches, and identify further opportunities to strengthen cybersecurity in interconnected power grids.

show abstract

SECPSIM: A Training Simulator for cyber-power infrastructure security

Cited by 8 publications

References 12 publications

Advanced Applications in Process Control and Training Needs of Field and Control Room Operators

Advanced Applications in Process Control and Training Needs of Field and Control Room Operators

Cybersecurity in Power Grids: Challenges and Opportunities

Cybersecurity in Power Grids: Challenges and Opportunities

Contact Info

Product

Resources

About