NSERC/Hydro-Québec/Thales Industrial Research Chair in Smart Grid Security: Detection, Prevention, Mitigation and Recovery from Cyber-Physical Attacks

目前的电网被认为是二十世纪最好的工程成就之一。它 旨在向各种消费领域提供电力。在很大程度上，它在 实现这一目标。尽管如此，电网在过去几年里经历了几次停电。在……里面 特别是，在过去的四十年里发生了五次大停电，其中三次发生在 光是过去的九年。确保电力安全、实现能源效率和促进 通过增加可再生能源的利用来保护环境正在推动部署 智能电网。据预测，这些智能电网将允许双向电力流动以及新的方式 既要管理发电，又要管理日益增长的能源需求。智能电网的成功部署 是以保证其安全的能力为前提的。这一要求至关重要，因为 电网对关键基础设施的几个组成部分至关重要。近期发生的网络安全事件 安全研究表明，电网可能会受到破坏攻击， 可能导致严重的安全和经济后果，甚至危及和损失人类 活着。此外，信息和通信技术的日益一体化肯定会加强网络攻击 表面。利用这些漏洞可能会导致攻击，例如，扭曲状态 信息，改变在输电线路上定位事件或故障的能力，将电网置于运行点 他们面临着更大的突发事件风险。这将导致不良和严重的后果，例如 财务损失、连锁故障造成的系统性损失、大停电等。 研究旨在探索智能电网域、组件、设备和协议的安全性，以：(1)引出 安全要求；(2)识别攻击面以及潜在的漏洞、威胁和 其网络物理后果；(3)提出实用和有效的检测、预防、缓解和 恢复技术和方法，肯定会加强和提高智能电网的整体安全性。

The current electric grid is considered as one of the best engineering achievements of the twentieth century. It was designed to deliver power to various consumer domains. To a large extent, it has been successful in fulfilling this objective. Nevertheless, the electric grid has experienced several blackouts over the past years. In particular, there have been five major blackouts over the past forty years, three of which have occurred in the past nine years alone. The aspiration to secure power, to achieve energy efficiency and to contribute to environment protection through the increasing utilization of renewable energies are driving the need to deploy smart grids. It is predicated that these smart grids will allow for bidirectional power flow as well as new ways to manage both power generation and the increasing energy demand. The successful deployment of smart grids is predicated on the ability to guarantee their security. Such a requirement is of paramount importance since electrical grids are essential to several components of the critical infrastructure. Recent cyber security incidents and security research studies demonstrate that electrical grids could be subjected to disrupting attacks that might lead to severe security and economic consequences, and even to the endangerment and loss of human lives. Furthermore, the increasing integration of ICT technologies will definitely augment cyber attack surfaces. The exploitation of these vulnerabilities might lead to attacks that will, for instance, skew the state information, alter the abilities to locate events or faults on transmission lines, place the grid at operating points that are at greater risk from contingencies. This will lead to undesirable and severe consequences such as financial losses, systemic losses from cascading failures, major blackouts, etc. The primary intent of this research is to explore the security of smart grid domains, components, devices and protocols to: (1) elicit the security requirements; (2) identify the attack surfaces together with the underlying vulnerabilities, threats and their cyber physical consequences; (3) propose practical and efficient detection, prevention, mitigation and recovery techniques and methodologies that will definitely harden and enhance the overall smart grid security.