Cyber Security Energia Una Piattaforma di Ricerca e Innovazione. Giovanna Dondossola

Transcript

1 Cyber Security Energia Una Piattaforma di Ricerca e Innovazione Giovanna Dondossola

2 Agenda Cyber Security in RSE Evoluzione dello scenario energe7co Pia9aforma RSE di Ricerca e Innovazione Funzioni e Capacità Applicazioni e ProgeA RSE

3

4

5 SG Cyber-Power Risk Evaluation Smart Grids have complex network architectures Risk evalua7on is a technically difficult task SG network topology - > several a9ack paths targe7ng numerous distributed control devices How to predict plausible cyber threats to SG Effects of a9ack processes on SG opera7on and control Impact of a9ack effects on SG services 5

6 SG Cyber-Power Risk Evaluation Economically difficult to us7fy High cost of security management min Risk - > >>>cost(security) Real benefits? to control the value of risk to understand if we are spending enough for security

7 = S Power Cyber P P R ) (γ ) ( ) (... ) (,,, 1, 1, 1,,1,1 1, n T n V n K n T n V n K T V K P π π π π π π π π π =

8 From UC analysis to Smart Grid policies

9 DER Control - security analysis 9

10 DER Control - secured architecture Secure Architecture

11 RSE PCS-ResTest Lab

12 Lab - Technologies and Tools ICT Monitoring Monitoring Security 4G/3G M2M Control Center HMI Attacks Fault Manag. Visualisers LTE M2M test platform Trace Analysers ICT network DER IEC simulators12 ProfileRoma 24 Settembre Conferenza Nazionale, CASD Palazzo Salviati,

13 Lab - obectives Integrate technical security measures into grid opera7on preven7ve measures defense (correc7ve) measures Combine network (gateway) level with applica7on (control devices) level security Guarantee the security of applica&on connec&ons Perform security tes7ng Facili7ate security standard deployment and contribute to security standard evolu7on Evaluate communica7on performances (QoS indicators) in presence of ICT faults or cyber a9acks Showcase cyber security func7onali7es by demonstra7ons

14 Lab - capabilities Grid monitoring and opera7on Applica7on of communica7on security standards Fault/a9ack inec7on Analysis of the fault/a9ack effects on the control scenarios Communica7on security monitoring Network traffic as inputs to communica7on monitoring (on line indicators) Online indicators as inputs to fault management for detec7on and recovery Offline indicators as inputs to model based assessment tools for impact evalua7on purposes Network simula7ons based on cross- validated and scale- up communica7on models under fault/a9ack Evalua7on of QoS indicators from experimental data

15 QoS Test Sessions Test A Test B Test C runs of 500 reports sent from MMS servers MMS connec7on las7ng 2 hours with both reports from MMS servers and setpoints from MMS client MMS connec7on las7ng 24 hours with only reports from MMS servers Network technologies Security measures A9acks # DER servers DER server geospa7al reference Test Time (CET) 15

16 Traces analysis Traces Analyzer Tool Measures TCP/TLS Handshake Time Handshake dura7on for TCP connec7on/tls session RTT- Setpoint Time interval between the output of a setpoint request and the recep7on of the corresponding TCP ack by the MMS client MMS Session Time Time required for the establishment of the MMS session Inter- Report Time or Inter- Setpoint Time: Time interval between each two consecu7ve reports or setpoints, respec7vely MMS Profile Exchange Time Exchange dura7on of the MMS profile between client and server Retransmissions Number of TCP Retransmissions Number of report retransmissions TLS renego&a&on/ resump&on &me Time required for renego7a7on/resump7on opera7ons # of TCP/MMS/TLS sessions Number of correct establishment of TCP, TLS and MMS sessions Number of failed establishment of TCP, TLS and MMS sessions RTT (Round Trip Time)- Report Time interval between the output of a report and the recep7on of the corresponding TCP ack by the MMS server Losses Number of lost reports/setpoints

17 Lab Demo Sessions: from Com Traces to Security Alerts Traces Analysis Tool Measures Data obect SNMP MIB Alert

18 Acknowledged Proects Ricerca di Sistema Proge9o Generazione Distribuita e Re7 AAve SmartC2Net UE FP7 ICT Smart Control of Energy Distribu7on Grids over Heterogeneous Communica7on Networks SoES proect.eu UE EPCIP Security of Energy Systems

19 Sicurezza Elettrica --> piani di difesa flessibili/integrati/ multioperatore Misure preventive Esercizio Sistema Elettrico --> Risk Management Misure correttive rse-web.it Linee di difesa stratificate --> controlli stratificati Misure difensive