COoperative Cyber prOtectiON for modern power grids (COCOON)

信息技术(IT)与操作技术(OT)环境的融合，用于数字化电力和能源系统(EPES)操作的关键任务的稳定性和灵活性，以及通过分布式可再生能源(DRES)实现新的辅助服务(AS)业务市场，无疑扩大了具有固有网络物理特性的现代电网中的网络攻击范围。为了实现务实和合作的网络物理保护，Cocoon带来了一种跨学科的方法，包括网络系统和电力系统工程研究与系统运行之间的协同作用。通过Cocoon，EPES中的网络保护应a)以最佳和安全的方式发挥作用，b)以本地方式提供域间安全信息交换，c)满足电力系统对实时网络物理威胁检测和缓解的要求，d)加强电网保护操作的操作员培训。Cocoon提供的自下而上的面向系统的方法将能够组成实用的数据驱动的网络物理保护机制，以便在需要时实时运作，并加强(1)网络物理异常诊断、(2)脆弱性评估和风险描述、(3)缓解网络威胁和(4)值得信赖的信息交流。Cocoon将在四个不同的试点研究中进行演示，重点是探测、分类和减轻复合网络媒介，目标是：(I)作为能源社区的工具，通过它们与DSO的接口(希腊)；(Ii)欧盟东南网络协调员(区域，设在希腊)内的跨TSO电网稳定性数据更新；(Iii)DSO变电站(荷兰)；以及(Iv)与DSO接口的DRES聚合器(西班牙)。

The convergence of Information Technology (IT) with Operational Technology (OT) environmentsfor digitising mission-criticalstability and flexibility of Electrical Power and Energy System (EPES) operations as well as new Ancillary Services (AS) business markets through Distributed Renewable Energy Sources (DRES), has undoubtedly expanded the cyber-attack spectrum in modern power grids with intrinsic cyber-physical properties. To achieve a pragmatic and cooperative cyber-physical protection, COCOON brings an interdisciplinary approach consisting of the synergy between networked systems and power systems engineering research with system operations over real setups. Through COCOON, cyber protection in EPES should a) function optimally and securely, b) natively provide inter-domain secure information exchange, c) address real-time power systems requirements for timely cyber-physical threat detection and mitigation, d) enhance operator training for grid protection operations. The bottom-up systems-oriented approach offered by COCOON will enable the composition of practical data-driven cyber-physical protection mechanismsto operate if needed on real-time and enhance (i) cyber-physical anomaly diagnosis, (ii) vulnerability assessment and risk profiling, (iii) cyber threat mitigation and (iv) trustworthy information exchange. COCOON will be demonstrated in four distinct pilot studies focusing on detecting, classifying and mitigating composite cyber-vectors targeting (i) AS instrumentation in energy communities through their interface with a DSO (Greece), (ii) cross-TSO grid stability data updates within the EU South East network coordinator (regional, based in Greece), (iii) DSO substations (Netherlands), and (iv) DRES aggregators interfacing with a DSO (Spain).