Evaluation framework for dynamic analysis tools for Smart Grid software security

通用电气(GE)通过提供资本、专业知识和基础设施，在建设全球经济方面处于世界领先地位。通用电气通过提供石油、天然气、风能、太阳能和沼气能源的先进技术，以及能源管理和电网现代化的创新解决方案，为加拿大提供动力。通用电气正在为公用事业、消费者和工业现场开发创新的智能电网解决方案。智能电网是一个基础设施的集合，它在线获取有关电网状态的关键信息，以便电力供应商和用户能够就其电力使用做出智能决策。智能电网中软件系统和应用程序使用量的增加带来了新的安全风险。为了应对这些风险，重要的是从智能电网软件的一开始就开始实施安全 开发生命周期(SDLC)，因为智能电网的安全对其可靠运行至关重要。通用电气在保护智能电网安全方面面临的挑战是，他们的软件开发人员要保护现有的软件系统，并开发设计上安全的新软件系统。可以使用工具来协助完成这些任务，但考虑到可用的大量商业和开源工具，以及各种工具支持的编程语言的多样性，需要进行研究来评估这些工具的有效性，为此，本研究项目的目标是与GE合作，设计和开发用于智能电网软件安全的动态分析工具的评估框架。

General Electric (GE) is a world leader in building global economies by providing capital, expertise and infrastructure. GE powers Canada by delivering advanced technology for oil, gas, wind, solar and biogas energy, and innovation solutions for energy management and electricity grid modernization. GE is developing innovative Smart Grid solutions for utilities consumers and industrial sites. The Smart Grid is a collection of infrastructures and takes key information about the state of the power grid online so that electricity suppliers and consumers can make intelligent decisions about their power usage. The increased usage of software systems and applications in the Smart Grid introduces new security risks. In order to address these risks it is important to begin implementing security in Smart Grid software from the beginning of the Software Development Life Cycle (SDLC) because the security of the Smart Grid is paramount for its reliable operation. The challenge GE faces in securing the smart grid is for their software developers to secure existing software systems and develop new software systems that are secure by design. Tools are available to assist with such tasks but given the large number of tools available, commercial and open source, and the variety of programming languages supported by various tools, research is required to evaluate the effectiveness of such tools and to this end the objective of this research project is to work with GE on designing and developing an evaluation framework for dynamic analysis tools for smart grid software security.