Evaluation framework for dynamic analysis tools for Smart Grid software security

点击翻译按钮获取中文摘要

General Electric (GE) is a world leader in building global economies by providing capital, expertise and infrastructure. GE powers Canada by delivering advanced technology for oil, gas, wind, solar and biogas energy, and innovation solutions for energy management and electricity grid modernization. GE is developing innovative Smart Grid solutions for utilities consumers and industrial sites. The Smart Grid is a collection of infrastructures and takes key information about the state of the power grid online so that electricity suppliers and consumers can make intelligent decisions about their power usage. The increased usage of software systems and applications in the Smart Grid introduces new security risks. In order to address these risks it is important to begin implementing security in Smart Grid software from the beginning of the Software Development Life Cycle (SDLC) because the security of the Smart Grid is paramount for its reliable operation. The challenge GE faces in securing the smart grid is for their software developers to secure existing software systems and develop new software systems that are secure by design. Tools are available to assist with such tasks but given the large number of tools available, commercial and open source, and the variety of programming languages supported by various tools, research is required to evaluate the effectiveness of such tools and to this end the objective of this research project is to work with GE on designing and developing an evaluation framework for dynamic analysis tools for smart grid software security.