Enhancing the Resilience and Security of the Smart Grid

我们社会的运转在很大程度上依赖于智能电网，由于采用了快速发展的物联网技术，智能电网正成为越来越有吸引力的网络攻击目标。最近的RedEcho恶意软件导致2020年10月停电，但该恶意软件直到2021年2月才被检测到，而2018年针对德国关键基础设施的攻击涉及157起网络事件，其中19起针对电网。这项研究建议的主要目的是应对分布式自动化系统(DAS)、分布式能源(DER)和虚拟发电厂(VPP)等新电网系统新出现的网络安全挑战，并进一步增强IEC 61850变电站、微电网和广域测量、保护和控制(WAMPAC)系统的弹性。在这一追求中，我们与魁北克水电公司、日立系统安全公司和StreamScan公司建立了战略行业合作伙伴关系。主要目标是：(1)深入探讨IEC 61850变电站、微电网、DAS、DER、VPP和WAMPAC的网络安全；(2)精心设计现实的联合模拟模型和数字孪生兄弟，捕捉信息技术(IT)和运营技术(OT)的融合、结构和行为；(3)评估攻击模型对联合模拟模型和数字孪生兄弟的影响；(4)制定利用机器学习和人工智能的先进网络安全监控系统，以及网络物理攻击缓解措施；(5)定义和验证捕捉智能电网领域网络安全和弹性态势的指标；(6)深入探讨供应链攻击对智能电网系统的范围和影响，并制定缓解策略；(7)详细介绍识别和识别工业物联网设备漏洞的技术。这将显著增强多个智能电网域的网络安全，并提供对安全要求、攻击面、相关漏洞和攻击场景的更好了解。此外，行业合作伙伴将从关键技术转让中受益，同时将在五年内培训38名高素质人员(16名博士、12名硕士和5名博士后研究员)。

The functioning of our society critically depends on smart grids, which are becoming increasingly attractive cyberattack targets due to the adoption of fast-evolving IoT technologies. The recent RedEcho malware led to a blackout in October 2020, but the malware was not detected until February 2021, while attacks against Germany's critical infrastructure in 2018 involved 157 cyber incidents, 19 of which targeted the power grid. The primary intent of this research proposal is to address emerging cybersecurity challenges of new power grid systems such as Distributed Automation Systems (DAS), Distributed Energy Resources (DERs), and Virtual Power Plants (VPPs), as well as further enhance the resilience of IEC 61850 substations, microgrids, and Wide-Area Measurement, Protection and Control (WAMPAC) systems. In this pursuit, we have a strategic industry partnership with Hydro-Québec, Hitachi Systems Security Inc., and StreamScan Inc. The main objectives are: (1) explore in-depth the cybersecurity of IEC 61850 substations, microgrids, DAS, DER, VPP, and WAMPAC; (2) elaborate realistic co-simulation models and digital twins capturing the Information Technology (IT) and Operational Technology (OT) convergence, structures, and behaviors; (3) assess the impacts of attack models on the co-simulation models and digital twins; (4) elaborate advanced cybersecurity monitoring systems leveraging machine learning and AI, along with cyber-physical attack mitigation measures; (5) define and validate metrics capturing the cybersecurity and resilience posture of smart grid domains; (6) explore in-depth the scope and impact of supply chain attacks on smart grid systems, and devise mitigation strategies; (7) elaborate techniques to identify and fingerprint vulnerabilities of Industrial IoT devices. This will significantly enhance cybersecurity across multiple smart grid domains and provide a better understanding of the security requirements, the attack surfaces, the related vulnerabilities, and the attack scenarios. Alongside, industry partners will benefit from key technology transfers while a number of 38 highly qualified personnel (16 Ph.D., 12 MASc, and 5 Postdoctoral fellows) will be trained over a five-year period.