Evaluation framework for dynamic analysis tools for Smart Grid software security

智能电网软件安全动态分析工具评估框架

• 批准号: 490684-2015
• 负责人: Mahmoud, Qusay
• 金额: $ 1.82万
• 依托单位: University of Ontario Institute of Technology
• 依托单位国家: 加拿大
• 项目类别: Engage Grants Program
• 财政年份: 2015
• 资助国家: 加拿大
• 起止时间: 2015-01-01 至 2016-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=586577
• 关键词: Evaluation; framework; dynamic; analysis; tools

General Electric (GE) is a world leader in building global economies by providing capital, expertise and infrastructure. GE powers Canada by delivering advanced technology for oil, gas, wind, solar and biogas energy, and innovation solutions for energy management and electricity grid modernization. GE is developing innovative Smart Grid solutions for utilities consumers and industrial sites. The Smart Grid is a collection of infrastructures and takes key information about the state of the power grid online so that electricity suppliers and consumers can make intelligent decisions about their power usage. The increased usage of software systems and applications in the Smart Grid introduces new security risks. In order to address these risks it is important to begin implementing security in Smart Grid software from the beginning of the Software Development Life Cycle (SDLC) because the security of the Smart Grid is paramount for its reliable operation. The challenge GE faces in securing the smart grid is for their software developers to secure existing software systems and develop new software systems that are secure by design. Tools are available to assist with such tasks but given the large number of tools available, commercial and open source, and the variety of programming languages supported by various tools, research is required to evaluate the effectiveness of such tools and to this end the objective of this research project is to work with GE on designing and developing an evaluation framework for dynamic analysis tools for smart grid software security.

通用电气（GE）通过提供资本、专业知识和基础设施，在构建全球经济方面处于世界领先地位。GE为加拿大提供先进的石油、天然气、风能、太阳能和沼气技术，以及能源管理和电网现代化的创新解决方案。通用电气正在为公用事业用户和工业场所开发创新的智能电网解决方案。智能电网是一系列基础设施的集合，它收集有关电网在线状态的关键信息，以便电力供应商和消费者能够对他们的电力使用做出明智的决策。智能电网中越来越多的软件系统和应用程序带来了新的安全风险。为了解决这些风险，从一开始就在智能电网软件中实现安全是很重要的