Advanced IT/OT convergence methods for secure power grid control

关键的能源基础设施正在经历一个“网络使能”，通过集成信息技术（IT），如先进的传感器，通信网络和计算设备与操作技术（OT），监测和控制电力输送。对信息技术的日益依赖具有提高效率、可持续性和可靠性的优势，但代价是易受网络攻击。鉴于这些系统中存在的地理规模、数据量和复杂的相互依赖关系，此类基础设施的网络安全具有挑战性。此外，当前的安全实践在IT和OT领域之间是孤立的，这是由于它们不同的发展速度、生命周期、驱动因素和组织领域。 在这个项目中，我们在IT/OT融合框架内为电网开发先进的威胁检测和防御系统，该框架建立在现有的安全实践基础上。IT/OT融合是指将信息和运营环境中的系统、流程、数据和人员整合在一个保护伞下，为提高态势感知提供机会。因此，该提案的成果包括使用组合IT/OT数据和基于响应控制的协调防御策略来更准确和快速地检测新兴电网攻击的机制，这些策略限制了攻击对IT和OT领域的影响。研究结果将与Hydro魁北克研究所合作，使用其先进的试验台进行设计和测试。 该提案与加拿大的网络安全战略和关键基础设施国家战略和行动计划相一致。一个社会的健康和幸福与其国家安全息息相关。关键的能源基础设施是一个国家福祉的基石。拟议的项目支持一个得到加强的社会，使加拿大学术界和工业界能够合作参与保护工作，为持续的安全创造工具并培训高素质的人员。

Critical energy infrastructure is undergoing a "cyber-enablement" through the integration of information technology (IT) such as advanced sensors, communication networks and computational devices with operational technology (OT) that monitors and controls power delivery. The increased dependence on IT has advantages of improved efficiency, sustainability and reliability, but at a cost of vulnerability to cyber attack. Cybersecurity of such infrastructure is challenging given the geographic scale, volume of data and complex interdependencies that exist within these systems. In addition, current security practices are siloed between IT and OT domains due to their distinct evolutionary pace, lifecycles, drivers and organizational domains. In this project, we develop advanced threat detection and defense systems for the power grid within an IT/OT convergence framework that builds on existing security practices. IT/OT convergence refers to the integration of systems, processes, data and people from the information and operational environments under one umbrella providing opportunities for improved situational awareness. As such, the outcomes of this proposal include mechanisms for more accurate and fast threat detection of emerging power grid attacks using combined IT/OT data and coordinated defense strategies based on responsive control that limit the impacts of attack on both IT and OT domains. Research results will be designed and tested in collaboration with Hydro Quebec Research Institute using their advanced testbed facilitates. This proposal is aligned with Canada's Cyber Security Strategy and the National Strategy and Action Plan for Critical Infrastructure. The health and happiness of a society is coupled to its national security. Critical energy infrastructures represent a corner stone of a nation's well-being. The proposed project supports a strengthened society in which Canadian academia and industry can collaboratively participate in its protection creating tools and training highly qualified personnel for its continued safety.