Advanced IT/OT convergence methods for secure power grid control

关键能源基础设施正在通过先进传感器、通信网络和计算设备等信息技术 (IT) 与监控和控制电力输送的操作技术 (OT) 的集成，实现“网络赋能”。对 IT 依赖程度的增加具有提高效率、可持续性和可靠性的优点，但代价是容易受到网络攻击。鉴于这些系统中存在的地理规模、数据量和复杂的相互依赖性，此类基础设施的网络安全面临着挑战。此外，由于 IT 和 OT 领域不同的发展速度、生命周期、驱动因素和组织领域，当前的安全实践在 IT 和 OT 领域之间是孤立的。 在此项目中，我们在基于现有安全实践的 IT/OT 融合框架内为电网开发先进的威胁检测和防御系统。 IT/OT 融合是指将信息和运营环境中的系统、流程、数据和人员集成到一个整体下，从而为改进态势感知提供机会。因此，该提案的成果包括使用组合 IT/OT 数据和基于响应控制的协调防御策略来更准确、快速地检测新兴电网攻击的威胁，以限制攻击对 IT 和 OT 领域的影响。研究结果将与魁北克水电研究所合作，利用其先进的测试平台进行设计和测试。 该提案与加拿大的网络安全战略以及关键基础设施国家战略和行动计划保持一致。一个社会的健康和幸福与其国家安全息息相关。关键的能源基础设施是一个国家福祉的基石。拟议的项目支持一个更强大的社会，加拿大学术界和工业界可以合作参与其保护，创建工具并培训高素质人员以确保其持续安全。

Critical energy infrastructure is undergoing a "cyber-enablement" through the integration of information technology (IT) such as advanced sensors, communication networks and computational devices with operational technology (OT) that monitors and controls power delivery. The increased dependence on IT has advantages of improved efficiency, sustainability and reliability, but at a cost of vulnerability to cyber attack. Cybersecurity of such infrastructure is challenging given the geographic scale, volume of data and complex interdependencies that exist within these systems. In addition, current security practices are siloed between IT and OT domains due to their distinct evolutionary pace, lifecycles, drivers and organizational domains. In this project, we develop advanced threat detection and defense systems for the power grid within an IT/OT convergence framework that builds on existing security practices. IT/OT convergence refers to the integration of systems, processes, data and people from the information and operational environments under one umbrella providing opportunities for improved situational awareness. As such, the outcomes of this proposal include mechanisms for more accurate and fast threat detection of emerging power grid attacks using combined IT/OT data and coordinated defense strategies based on responsive control that limit the impacts of attack on both IT and OT domains. Research results will be designed and tested in collaboration with Hydro Quebec Research Institute using their advanced testbed facilitates. This proposal is aligned with Canada's Cyber Security Strategy and the National Strategy and Action Plan for Critical Infrastructure. The health and happiness of a society is coupled to its national security. Critical energy infrastructures represent a corner stone of a nation's well-being. The proposed project supports a strengthened society in which Canadian academia and industry can collaboratively participate in its protection creating tools and training highly qualified personnel for its continued safety.