I-Corps: Cybersecurity Solution for Collecting, Storing, and Using Substation Relay Settings Data

这个I-Corps项目的更广泛的影响/商业潜力是为美国电力行业提供一种新的能力，（1）提高系统可靠性，（2）以新的方式将网络和物理系统分析联系起来。 电网的可靠、弹性和安全运行是至关重要的国家利益，是经济活力、高生活水平和健康/福利的基础。 电网是有史以来最复杂的系统之一，易受极端天气、自然灾害、犯罪行为和敌对攻击的影响。 它有大约3，100家发电，传输和/或分配电力的供应商，他们运营着70，000多个高压变电站。 每个变电站都有数十个继电器，用于打开和关闭断路器-控制电力流。 系统规划人员需要准确的、最新的继电器设置来填充计算机模拟，从而形成可靠的系统设计和操作。 通常，系统保护人员维护特定于其需要的继电器设置数据库。 系统规划人员经常发现这些数据库不适合他们的需求-提取/调整规划模拟所需的数据子集是一项手动、工时密集的工作。 系统运营商也有义务在收集，存储和使用过程中保护继电器设置数据，以防止犯罪分子或其他敌对行为者的利用。这个I-Corps项目旨在为电力系统运营商提供一种新的能力，以简化/协调他们的努力，收集，存储，使用和保护继电器数据，用于系统研究/分析。 这一新功能还将使电力供应商能够将其物理系统仿真结果与网络地图联系起来，从而为安全工作优先级划分打开了大门，实现了以前无法实现的新协同作用。 研究目标有两个方面。 首先，该项目旨在提供集成的端到端功能，实现自动化继电器设置数据收集、中央存储以及向系统分析师提供自动化定制数据。 物理产品将是一个独立的、专门建造的计算机系统，它包含多个基本功能：数据库、FTP服务器、Web服务器、解析器和特定应用软件。 第二，设想扩展能力以利用最近推出的启用软件保护扩展（SGX）的CPU，其提供加密的存储器空间以安全地处理敏感数据。 这款专用计算机连接支持SGX的CPU，将为模拟电力系统行为的联网计算机系统提供新的安全级别。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The broader impact/commercial potential of this I-Corps project is to provide a new capability to the U.S. electric utility industry that (1) enhances system reliability and (2) enables linking cyber and physical system analyses in new ways. The power grid's reliable, resilient, and secure operation is a vital national interest - underpinning economic vitality, high living standards, and health/welfare. The power grid, one of the most complex systems ever built, is vulnerable to extreme weather, natural disasters, criminal acts, and hostile attacks. It has some 3,100 providers generating, transmitting, and/or distributing power, who operate more 70,000 high-voltage sub-stations. Each substation has tens of relays that open and close breakers - controlling power flows. System planning staffs require accurate, up-to-date relay settings to populate computer simulations that shape reliable system design and operation. Typically, system protection staffs maintain relay settings databases specific to their needs. System planning staffs often find these databases are ill-suited for their needs - extracting/adapting the needed data subsets for planning simulations is a manual, man-hour intense effort. The system operator is also obligated to protect relay settings data during collection, storage, and use to prevent exploitation by criminals or other hostile actors.This I-Corps project seeks to provide power system operators a new capability to streamline/harmonize their efforts to collect, store, use, and secure relay data for system studies/analysis. This new capability will also enable power providers to link their physical system simulation results and cyber network maps - opening the door to security effort prioritization with new, previously unachievable, synergy. The research objectives are two-fold. First, the project seeks to provide an integrated, end-to-end capability enabling automated relay settings data collection, central storage, and automated, tailored data provision to system analysts. The physical product will be a standalone, purpose-built computer system that incorporates multiple essential functions: database, FTP server, webserver, parser, and application-specific software. Second, it is envisioned to expand the capabilities to leverage recently introduced Software Guard Extension (SGX)-enabled CPUs, which provide encrypted memory space for securely processing sensitive data. The purpose-built computer linking SGX-enabled CPUs will provide a new level of security on networked computer systems simulating power system behaviors.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.