Advanced IT/OT convergence methods for secure power grid control

用于安全电网控制的先进 IT/OT 融合方法

• 批准号: 506429-2017
• 负责人: Kundur, Deepa
• 金额: $ 5.15万
• 依托单位: University of Toronto
• 依托单位国家: 加拿大
• 项目类别: Strategic Projects - Group
• 财政年份: 2019
• 资助国家: 加拿大
• 起止时间: 2019-01-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=691595
• 关键词: Advanced; OT; convergence; methods; secure

Critical energy infrastructure is undergoing a "cyber-enablement" through the integration of information technology (IT) such as advanced sensors, communication networks and computational devices with operational technology (OT) that monitors and controls power delivery. The increased dependence on IT has advantages of improved efficiency, sustainability and reliability, but at a cost of vulnerability to cyber attack. Cybersecurity of such infrastructure is challenging given the geographic scale, volume of data and complex interdependencies that exist within these systems. In addition, current security practices are siloed between IT and OT domains due to their distinct evolutionary pace, lifecycles, drivers and organizational domains. In this project, we develop advanced threat detection and defense systems for the power grid within an IT/OT convergence framework that builds on existing security practices. IT/OT convergence refers to the integration of systems, processes, data and people from the information and operational environments under one umbrella providing opportunities for improved situational awareness. As such, the outcomes of this proposal include mechanisms for more accurate and fast threat detection of emerging power grid attacks using combined IT/OT data and coordinated defense strategies based on responsive control that limit the impacts of attack on both IT and OT domains. Research results will be designed and tested in collaboration with Hydro Quebec Research Institute using their advanced testbed facilitates. This proposal is aligned with Canada's Cyber Security Strategy and the National Strategy and Action Plan for Critical Infrastructure. The health and happiness of a society is coupled to its national security. Critical energy infrastructures represent a corner stone of a nation's well-being. The proposed project supports a strengthened society in which Canadian academia and industry can collaboratively participate in its protection creating tools and training highly qualified personnel for its continued safety.

关键的能源基础设施正在通过信息技术（IT）的集成，如先进的传感器、通信网络和计算设备，以及监控和控制电力输送的操作技术（OT），经历一场“网络使能”。对信息技术的依赖程度的提高具有提高效率、可持续性和可靠性的优点，但代价是容易受到网络攻击。考虑到这些系统中存在的地理规模、数据量和复杂的相互依赖性，此类基础设施的网络安全具有挑战性。此外，由于IT和OT领域的发展速度、生命周期、驱动因素和组织领域不同，当前的安全实践在IT和OT领域之间是孤立的。在这个项目中，我们在现有安全实践的基础上，为IT/OT融合框架内的电网开发先进的威胁检测和防御系统。IT/OT融合是指将信息和操作环境中的系统、流程、数据和人员集成在一个保护伞下，为改进态势感知提供机会。因此，该提案的成果包括使用IT/OT数据组合和基于响应性控制的协调防御策略来更准确和快速地检测新兴电网攻击的机制，从而限制攻击对IT和OT领域的影响。研究成果将与Hydro Quebec研究所合作设计和测试，使用他们先进的测试平台。该提案与加拿大的网络安全战略和关键基础设施的国家战略和行动计划保持一致。一个社会的健康和幸福是与其国家安全相联系的。关键的能源基础设施是一个国家福祉的基石。拟议的项目支持一个加强的社会，在这个社会中，加拿大学术界和工业界可以共同参与保护，创造工具并培训高素质的人员，以确保其持续安全。