Cheap uranium equity valuations could lead to acquisition

Muskrat Falls rate mitigation offsets Newfoundland Power's rate stabilization decrease as NL Hydro begins cost recovery; Public Utilities Board approval enables collections while Labrador-Island Link nears commissioning, stabilizing electricity rates despite megaproject delays, overruns.

Key Points

Muskrat Falls rate mitigation is NL Hydro's cost recovery via power rates to stabilize bills as commissioning nears.

✅ Offsets 6.4% decrease with a 6.1% rate increase

✅ About 6% now funds NL Hydro's rate mitigation

✅ Collections begin as Labrador-Island Link nears commissioning

With their July electricity bill, Newfoundland Power customers have begun paying for Muskrat Falls, though a lump-sum credit was also announced to offset costs and bills haven't significantly increased — yet.

In a July newsletter, Newfoundland Power said electricity bills were set to decrease by 6.4 per cent as part of the annual rate stabilization adjustment, which reflects the cost of electricity generation.

Instead, that decrease has been offset by a 6.1 increase in electricity rates so Newfoundland and Labrador Hydro can begin recovering the cost of Muskrat Falls, with a $5.2-billion federal package also underpinning the project, the $13-billion hydroelectric megaproject that is billions over budget and years behind schedule.

That means for residential customers, electricity rates will decrease to 12.346 cents per kilowatt, though the basic customer charge will go up slightly from $15.81 to $15.83. According to an N.L. Hydro spokesperson, about six per cent of electricity bills will now go toward what it calls a "rate mitigation fund." 

N.L. Hydro claims victory in Muskrat Falls arbitration dispute with Astaldi
Software troubles blamed for $260M Muskrat Falls cost increase, with N.L. power rates stable for now
The spokesperson said N.L. Hydro is expecting the rate increase to result in $43 million this year, according to a recent financial update from the energy corporation — a tiny fraction of the project's cost. 

N.L. Hydro asked the Public Utilities Board to approve the rate increase, a process similar to Nova Scotia's recent 14% approval by its regulator, in May. In a letter, Energy, Industry and Technology Minister Andrew Parsons supported the increase, though he asked N.L. Hydro to keep electricity rates "as close to current levels as possible. 

Province modifies order in council
Muskrat Falls is not yet fully online — largely due to software problems with the Labrador-Island Link transmission line — and an order in council dictated that ratepayers on the island of Newfoundland would not begin paying for the project until the project was fully commissioned. 

The provincial government modified that order in council so N.L. Hydro can begin collecting costs associated with Muskrat Falls once the project is "nearing" commissioning.

In June, N.L. Hydro said the project was expected to finally be completed by the end of the year.

In an interview with CBC News, Progressive Conservative interim leader David Brazil said the decision to begin recovering the cost of Muskrat Falls from consumers should have been delayed.

"There was an opportunity here for people to get some reprieve when it came to their electricity bills and this administration chose not to do that, not to help the people while they're struggling," he said.

In a statement, Parsons said reducing the rate was not an option, and would have resulted in increased borrowing costs for Muskrat Falls.

"Reducing the rate for one year to have it increase significantly the following year is not consistent with rate mitigation and also places an increased financial burden on taxpayers one year from now," Parsons said.

Decision 'reasonable': Consumer advocate
Brazil said his party didn't know the payments from Muskrat Falls would start in July, and criticized the government for not being more transparent.

A person wearing a blue shirt and black blazer stands outside on a lawn.
N.L. consumer advocate Dennis Browne says it makes sense to begin recouping the cost of Muskrat Falls. (Garrett Barry/CBC)
Newfoundland and Labrador consumer advocate Dennis Browne said the decision to begin collecting costs from consumers was "reasonable."

"We're into a financial hole due to Muskrat Falls, and what has happened is in order to stabilize rates, we have gone into rate stabilization efforts," he said.

In February, the provincial and federal governments signed a complex agreement to shield ratepayers aimed at softening the worst of the financial impact from Muskrat Falls. Browne noted even with the agreement, the provincial government will have to pay hundreds of millions in order to stabilize electricity rates.

"Muskrat Falls would cost us $0.23 a kilowatt, and that is out of the range of affordability for most people, and that's why we're into rate mitigation," he said. "This was part of a rate mitigation effort, and I accepted it as part of that."

Related News

• Electricity Forum News

• Energy Policy News

Harbour Air Electric Seaplanes pioneer sustainable aviation with battery-electric propulsion, zero-emission operations, and retrofitted de Havilland Beavers using magniX motors for regional commuter routes, cutting fuel burn, maintenance, and carbon footprints across British Columbia.

Key Points

Retrofitted floatplanes using magniX battery-electric motors to provide zero-emission, short-haul regional flights.

✅ Battery-electric magniX motors retrofit de Havilland DHC-2 Beavers

✅ Zero-emission, low-noise operations on short regional routes

✅ Lower maintenance and operating costs vs combustion engines

Aviation is one of the fastest rising sources of carbon emissions from transport, but can a small Canadian airline show the industry a way of flying that is better for the planet?

As air journeys go, it was just a short hop into the early morning sky before the de Havilland seaplane splashed back down on the Fraser River in Richmond, British Columbia. Four minutes earlier it had taken off from the same patch of water. But despite its brief duration, the flight may have marked the start of an aviation revolution.

Those keen of hearing at the riverside on that cold December morning might have been able to pick up something different amid the rumble of the propellers and whoosh of water as the six-passenger de Havilland DHC-2 Beaver took off and landed. What was missing was the throaty growl of the aircraft’s nine-cylinder radial engine.

In its place was an all-electric propulsion engine built by the technology firm magniX that had been installed in the aircraft over the course of several months. The four-minute test flight (the plane was restricted to flying in clear skies, so with fog and rain closing in the team opted for a short trip) was the first time an all-electric commercial passenger aircraft had taken to the skies.

The retrofitted de Havilland DHC-2 Beaver took off from the Fraser River in the early morning light for a four minute test flight (Credit: Diane Selkirk)

“It was the first shot of the electric aviation revolution,” says Roei Ganzarski, chief executive of magniX, which worked with Canadian airline Harbour Air Seaplanes to convert one of the aircraft in their fleet of seaplanes so it could run on battery power rather than fossil fuels.

For Greg McDougall, founder of Harbour Air and pilot during the test flight, it marked the culmination of years of trying to put the environment at the forefront of its operations, backed by research investment across the program.

Harbour Air, which has a fleet of some 40 commuter floatplanes serving the coastal regions around Vancouver, Victoria and Seattle, was the first airline in North America to become carbon-neutral through offsets in 2007. A one-acre green roof on their new Victoria airline terminal followed. Then in 2017, 50 solar panels and four beehives housing 10,000 honeybees were added, but for McDougall, a Tesla owner with an interest in disruptive technology, the big goal was to electrify the fleet, with 2023 electric passenger flights as an early target for service.

McDougall searched for alternative motor options for a couple of years and had put the plan on the backburner when Ganzarski first approached him in February 2019. “He said, ‘We’ve got a motor we want to get certified and we want to fly it before the end of the year,’” McDougall recalls.

The two companies found their environmental values and teams were a good match and quickly formed a partnership. Eleven months later, the modest Canadian airline got what McDougall refers to as their “e-plane” off the ground, pulling ahead of other electric flight projects, including those by big-name companies Airbus, Boeing and Rolls-Royce, and startups such as Eviation that later stumbled.

The test flight was followed years of work by Greg McDougall to make his airline more environmentally friendly (Credit: Diane Selkirk)

The project came together in record time considering how risk-adverse the aviation industry is, says McDougall. “Someone had to take the lead,” he says. “The reason I live in British Columbia is because of the outdoors: protecting it is in our DNA. When it came to getting the benefits from electric flight it made sense for us to step in and pioneer the next step.”

As the threat posed by the climate crisis deepens, there has been renewed interest in developing electric passenger aircraft as a way of reducing emissions
Electric flight has been around since the 1970s, but it’s remained limited to light-weight experimental planes flying short distances and solar-powered aircraft with enormous wingspans yet incapable of carrying passengers. But as the threat posed by the climate crisis deepens, there has been renewed interest in developing electric passenger aircraft as a way of reducing emissions and airline operating costs, aligning with broader Canada-U.S. collaboration on electrification across transport.

Currently there are about 170 electric aircraft projects underway internationally –up by 50% since April 2018, according to the consulting firm Roland Berger. Many of the projects are futuristic designs aimed at developing urban air taxis, private planes or aircraft for package delivery. But major firms such as Airbus have also announced plans to electrify their own aircraft. It plans to send its E-Fan X hybrid prototype of a commercial passenger jet on its maiden flight by 2021. But only one of the aircraft’s four jet engines will be replaced with a 2MW electric motor powered by an onboard battery.

This makes Harbour Air something of an outlier. As a coastal commuter airline, it operates smaller floatplanes that tend to make short trips up and down the coastline of British Columbia and Washington State, which means its aircraft can regularly recharge their batteries after a point-to-point electric flight along these routes. The company sees itself in a position to retrofit its entire fleet of floatplanes and make air travel in the region as green as possible.

This could bring some advantages. The efficiency of a typical combustion engine for a plane like this is fairly low – a large proportion of the energy from the fuel is lost as waste heat as it turns the propeller that drives the aircraft forward. Electrical motors have fewer moving parts, meaning there’s less maintenance and less maintenance cost, and comparable benefits are emerging for electric ships operating on the B.C. coast as well.

Electrical motors have fewer moving parts, meaning there’s less maintenance and less maintenance cost
Erika Holtz, Harbour Air’s engineering and quality manager, sees the move to electric as the next major aviation advancement, but warns that one stumbling block has been the perception of safety. “Mechanical systems are much better known and trusted,” she says. In contrast people see electrical systems as a bit unknown – think of your home computer. “Turning it off and on again isn’t an option in aviation,” she adds.

But it’s the possibility of spurring lasting change in aviation that’s made working on the Harbour Air/magniX project so exciting for Holtz. Aviation technology has stagnated over the past decades, she says. “Although there have been incremental improvements in certain technologies, there hasn't been a major development change in aviation in 50 years.”

Related News

• Electricity Forum News

• EV Infrastructure News

Ottawa Sewage Energy Exchange System uses wastewater heat recovery and efficient heat pumps to deliver renewable district energy, zero carbon heating and cooling, cutting greenhouse gas emissions at LeBreton Flats and scaling urban developments.

Key Points

A district energy system recovering wastewater heat via pumps to deliver zero carbon heating and cooling.

✅ Delivers 9 MW heating and cooling for 2.4M sq ft at LeBreton Flats

✅ Cuts 5,066 tonnes CO2e each year, reducing greenhouse gases

✅ Powers Odenak zero carbon housing via district energy

Ottawa is embarking on a groundbreaking initiative to harness the latent thermal energy within its wastewater system, in tandem with advances in energy storage in Ontario that strengthen grid resilience, marking a significant stride toward sustainable urban development. The Sewage Energy Exchange System (SEES) project, a collaborative effort led by the LeBreton Community Utility Partnership—which includes Envari Holding Inc. (a subsidiary of Hydro Ottawa) and Theia Partners—aims to revolutionize how the city powers its buildings.

Harnessing Wastewater for Sustainable Energy

The SEES will utilize advanced heat pump technology to extract thermal energy from the city's wastewater infrastructure, providing both heating and cooling to buildings within the LeBreton Flats redevelopment. This innovative approach eliminates the need for fossil fuels, aligning with Ottawa's commitment to reducing greenhouse gas emissions and promoting clean energy solutions across the province, including the Hydrogen Innovation Fund that supports new low-carbon pathways.

The system operates by diverting sewage from the municipal collection network into an external well, where it undergoes filtration to remove large solids. The filtered water is then passed through a heat exchanger, transferring thermal energy to the building's heating and cooling systems. After the energy is extracted, the treated water is safely returned to the city's sewer system.

Environmental and Economic Impact

Once fully implemented, the SEES is projected to deliver over 9 megawatts of heating and cooling capacity, servicing approximately 2.4 million square feet of development. This capacity is expected to reduce greenhouse gas emissions by approximately 5,066 tonnes annually—equivalent to the electricity consumption of over 3,300 homes for a year. Such reductions are pivotal in helping Ottawa meet its ambitious goal of achieving a 96% reduction in community-wide greenhouse gas emissions by 2040, as outlined in its Climate Change Master Plan and Energy Evolution strategy, and they align with Ontario's plan to rely on battery storage to meet rising demand across the grid.

Integration with the Odenak Development

The first phase of the SEES will support the Odenak development, a mixed-use project comprising two high-rise residential buildings. This development is poised to be Canada's largest residential zero-carbon project, echoing calls for Northern Ontario grid sustainability from community groups, featuring 601 housing units, with 41% designated as affordable housing. The integration of the SEES will ensure that Odenak operates entirely on renewable energy, setting a benchmark for future urban developments.

Broader Implications and Future Expansion

The SEES project is not just a localized initiative; it represents a scalable model for sustainable urban energy solutions that aligns with green energy investments in British Columbia and other jurisdictions. The LeBreton Community Utility Partnership is in discussions with the National Capital Commission to explore extending the SEES network to additional parcels within the LeBreton Flats redevelopment. Expanding the system could lead to economies of scale, further reducing costs and enhancing the environmental benefits.

Ottawa's venture into wastewater-based energy systems places it at the forefront of a growing trend in North America. Cities like Toronto and Vancouver have initiated similar projects, while related pilots such as the EV-to-grid pilot in Nova Scotia highlight complementary approaches, and European counterparts have long utilized sewage heat recovery systems. Ottawa's adoption of this technology underscores its commitment to innovation and sustainability in urban planning.

The SEES project at LeBreton Flats exemplifies how cities can repurpose existing infrastructure to create sustainable, low-carbon energy solutions. By transforming wastewater into a valuable energy resource, Ottawa is setting a precedent for environmentally responsible urban development. As the city moves forward with this initiative, it not only addresses immediate energy needs but also contributes to a cleaner, more sustainable future for its residents, even as the province accelerates Ontario's energy storage push to maintain reliability.

Related News

• Electricity Forum News

• Renewable Energy News

Alberta Hydropower Potential highlights renewable energy, dams, reservoirs, grid flexibility, contrasting wind and solar growth with limited investment, regulatory hurdles, river basin resources, and decarbonization pathways across Athabasca, Peace, and Slave River systems.

Key Points

It is the technical capacity for new hydro in Alberta's river basins to support a more reliable, lower carbon grid.

✅ 42,000 GWh per year developable hydro identified in studies.

✅ Major potential in Athabasca, Peace, and Slave River basins.

✅ Barriers include high capital costs, market design, water rights.

When you think about renewable energy sources on the Prairies, your mind may go to the wind farms in southern Alberta, or even the Travers Solar Project, southeast of Calgary.

Most of the conversation around renewable energy in the province is dominated by advancements in solar and wind power, amid Alberta's renewable energy surge that continues to attract attention. 

But what about Canada's main source of electricity — hydro power?

More than half of Canada's electricity is generated from hydro sources, with 632.2 terawatt-hours produced as of 2019. That makes it the fourth largest installed capacity of hydropower in the world. 

But in Alberta, it's a different story. 

Currently, hydro power contributes between three and five per cent of Alberta's energy mix, while fossil fuels make up about 89 per cent.

According to Canada's Energy Future report from the Canada Energy Regulator, by 2050 it will make up two per cent of the province's electricity generation shares.

So why is it that a province so rich in mountains and rivers has so little hydro power?

Hydro's history in Alberta
Hydro power didn't always make up such a small sliver of Alberta's electricity generation. Hydro installations began in the early 20th century as the province's population exploded. 

Grant Berg looks after engineering for hydro for TransAlta, Alberta's largest producer of hydro power with 17 facilities across the province.

"Our first plant was Horseshoe, which started in 1911 that we formed as Calgary Power," he said. 

"It was really in response to the City of Calgary growing and having some power needs."

Berg said in 1913, TransAlta's second installation, the Kananaskis Plant, started as Calgary continued to grow.

A historical photo of a hydro-electric dam in Kananaskis Alta. taken in 1914.
Hydro power plant in Kananaskis as seen in 1914. (Glenbow Archives)
Some bigger installations were built in the 1920s, including Ghost reservoir, but by mid-century population growth increased.

"Quite a large build out really, I think in response to the growth in Alberta following the war. So through the 1950s really quite a large build out of hydro from there."

By the 1950s, around half of the province's installed capacity was hydro power.

"Definitely Calgary power was all hydro until the 1950s," said Berg. 

Hydro potential in the province 
Despite the current low numbers in hydroelectricity, Alberta does have potential. 

According to a 2010 study, there is approximately 42,000 gigawatt-hours per year of remaining developable hydroelectric energy potential at identified sites. 

An average home in Alberta uses around 7,200 kilowatt-hours of electricity per year, meaning that the hydro potential could power 5.8 million homes each year. 

"This volume of energy could be sufficient to serve a significant amount of Alberta's load and therefore play a meaningful role in the decarbonization of the province's electric system," the Alberta Electric System Operator said in its 2022 Pathways to Net-Zero Emissions report.

Much of that potential lies in northern Alberta, in the Athabasca, Peace and Slave River basins.

The AESO report says that despite the large resource potential, Alberta's energy-only market framework has attracted limited investment in hydroelectric generation. 

Hydro power was once a big deal in Alberta, but investment in the industry has been in decline since the 1950s. Climate change reporter Christy Climenhaga explains why.
So why does Alberta leave out such a large resource potential on the path to net zero?

The government of Alberta responded to that question in a statement. 

"Hydro facilities, particularly large scale ones involving dams, are associated with high costs and logistical demands," said the Ministry of Affordability and Utilities. 

"Downstream water rights for other uses, such as irrigation, further complicate the development of hydro projects."

The ministry went on to say that wind and solar projects have increased far more rapidly because they can be developed at relatively lower cost and shorter timelines, and with fewer logistical demands.

"Sources from wind power and solar are increasingly more competitive," said Jean-Denis Charlebois, chief economist with the Canadian Energy Regulator. 

Hydro on the path to net zero
Hydro power is incredibly important to Canada's grid, and will remain so, despite growth in wind and solar power across the province.

Charlebois said that across Canada, the energy make-up will depend on the province. 

"Canadian provinces will generate electricity in very different ways from coast to coast. The major drivers are essentially geography," he said. 

Charlebois says that in British Columbia, Manitoba, Quebec and Newfoundland and Labrador, hydropower generation will continue to make up the majority of the grid.

"In Alberta and Saskatchewan, we see a fair bit of potential for wind and solar expansion in the region, which is not necessarily the case on Canada's coastlines," he said.

And although hydro is renewable, it does bring its adverse effects to the environment — land use changes, changes in flow patterns, fish populations and ecosystems, which will have to be continually monitored. 

"You want to be able to manage downstream effects; make sure that you're doing all the proper things for the environment," said Ryan Braden, director of mining and hydro at TransAlta.

Braden said hydro power still has a part to play in Alberta, even with its smaller contributions to the future grid. 

"It's one of those things that, you know, the wind doesn't blow or the sun doesn't shine, this is here. The way we manage it, we can really support that supply and demand," he said.

Related News

• Electricity Forum News

• Renewable Energy News

Cyprus Electricity Interconnectors link the island to the EU grid via EuroAsia and EuroAfrica projects, enabling renewable energy trade, subsea transmission, market liberalization, and stronger energy security and diplomacy across the region.

Key Points

Subsea links connecting Cyprus to Greece, Israel and Egypt for EU grid integration, renewable trade and energy security.

✅ Connects EU, Israel, Egypt via EuroAsia and EuroAfrica

✅ Enables renewables integration and market liberalization

✅ Strengthens energy security, investment, and diplomacy

Electricity interconnectors bridging Cyprus with the broader geographical region, mirroring projects like the Ireland-France grid link already underway in Europe, are crucial for its diplomacy while improving its game to become a clean energy hub.

In an interview with Phileleftheros daily, Andreas Poullikkas, chairman of the Cyprus Energy Regulatory Authority (CERA), said electricity cables such as the EuroAsia Interconnector and the EuroAfrica Interconnector, could turn the island into an energy hub, creating investment opportunities.

“Cyprus, with proper planning, can make the most of its energy potential, turning Cyprus into an electricity producer-state and hub by establishing electrical interconnections, such as the EuroAsia Interconnector and the EuroAfrica Interconnector,” said Poullikkas.

He said these electricity interconnectors, “will enable the island to become a hub for electricity transmission between the European Union, Israel and Egypt, with developments such as the Israel Electric Corporation settlement highlighting regional dynamics, while increasing our energy security”.

Poullikkas argued it will have beneficial consequences in shaping healthy conditions for liberalising the country’s electricity market and economy, facilitating the production of electricity with Renewable Energy Sources and supporting broader efforts like the UK grid transformation toward net zero.

“Electricity interconnections are an excellent opportunity for greater business flexibility in Cyprus, ushering new investment opportunities, as seen with the Lake Erie Connector investment across North America, either in electricity generation or other sectors. Especially at a time when any investment or financial opportunity is welcomed.”

He said Cyprus’ energy resources are a combination of hydrocarbon deposits and renewable energy sources, such as solar.

This combination offers the country a comparative advantage in the energy sector.

Cyprus can take advantage of the development of alternative supply routes of the EU, as more links such as new UK interconnectors come online.

Poullikkas argued that as energy networks are developing rapidly throughout the bloc, serving the ever-increasing needs for electricity, and aligning with the global energy interconnection vision highlighted in recent assessments, the need to connect Cyprus with its wider geographical area is a matter of urgency.

He argues the development of important energy infrastructure, especially electricity interconnections, is an important catalyst in the implementation of Cyprus goals, while recognising how rule changes like Australia's big battery market shift can affect storage strategies.

“It should also be a national political priority, as this will help strengthen diplomatic relations,” added Poullikkas.

Implementing the electricity interconnectors between Israel, Cyprus and Greece through Crete and Attica (EuroAsia Interconnector) has been delayed by two years.

He said the delay was brought about after Greece decided to separate the Crete-Attica section of the interconnection and treat as a national project.

Poullikkas stressed the Greek authorities are committed to ensuring the connection of Cyprus with the electricity market of the EU.

“All the required permits have been obtained from the competent authorities in Cyprus and upon the completion of the procedures with the preferred manufacturers, construction of the Cyprus-Crete electrical interconnection will begin before the end of this year. Based on current data, the entire interconnection is expected to be implemented in 2023”.

“The EuroAfrica Interconnector is in the pre-works stage, all project implementation studies have already been completed and submitted to the competent authorities, including cost and benefit studies”.

EuroAsia Interconnector is a leading EU project of common interest (PCI), also labelled as an “electricity highway” by the European Commission.

It connects the national grids of Israel, Cyprus and Greece, creating a reliable energy bridge between the continents of Asia and Europe allowing bi-directional transmission of electricity.

The cost of the entire subsea cable system, at 1,208km, the longest in the world and the deepest at 3,000m below sea level, is estimated at €2.5 bln.

Construction costs for the first phase of the Egypt-Cyprus interconnection (EuroAfrica) with a Stage 1 transmission capacity of 1,000MW is estimated at €1bln.

The Cyprus-Greece (Crete) interconnection, as well as the Egypt-Cyprus electricity interconnector, will both be commissioned by December 2023.

Related News

• Electricity Forum News

• EV Infrastructure News

Infrastructure Security Algorithm prioritizes cyber defense for power grids and critical infrastructure, mitigating ransomware, blackout risks, and cascading failures by guiding utilities, regulators, and cyber insurers on optimal security investment allocation.

Key Points

An algorithm that optimizes security spending to cut ransomware and blackout risks across critical infrastructure.

✅ Guides utilities on optimal security allocation

✅ Uses incentives to correct human risk biases

✅ Prioritizes assets to prevent cascading outages

Millions of people could suddenly lose electricity if a ransomware attack just slightly tweaked energy flow onto the U.S. power grid, as past US utility intrusions have shown.

No single power utility company has enough resources to protect the entire grid, but maybe all 3,000 of the grid's utilities could fill in the most crucial security gaps if there were a map showing where to prioritize their security investments.

Purdue University researchers have developed an algorithm to create that map. Using this tool, regulatory authorities or cyber insurance companies could establish a framework for protecting the U.S. power grid that guides the security investments of power utility companies to parts of the grid at greatest risk of causing a blackout if hacked.

Power grids are a type of critical infrastructure, which is any network - whether physical like water systems or virtual like health care record keeping - considered essential to a country's function and safety. The biggest ransomware attacks in history have happened in the past year, affecting most sectors of critical infrastructure in the U.S. such as grain distribution systems in the food and agriculture sector and the Colonial Pipeline, which carries fuel throughout the East Coast, prompting increased military preparation for grid hacks in the U.S.

With this trend in mind, Purdue researchers evaluated the algorithm in the context of various types of critical infrastructure in addition to the power sector, including electricity-sector IoT devices that interface with grid operations. The goal is that the algorithm would help secure any large and complex infrastructure system against cyberattacks.

"Multiple companies own different parts of infrastructure. When ransomware hits, it affects lots of different pieces of technology owned by different providers, so that's what makes ransomware a problem at the state, national and even global level," said Saurabh Bagchi, a professor in the Elmore Family School of Electrical and Computer Engineering and Center for Education and Research in Information Assurance and Security at Purdue. "When you are investing security money on large-scale infrastructures, bad investment decisions can mean your power grid goes out, or your telecommunications network goes out for a few days."

Protecting infrastructure from hacks by improving security investment decisions

The researchers tested the algorithm in simulations of previously reported hacks to four infrastructure systems: a smart grid, industrial control system, e-commerce platform and web-based telecommunications network. They found that use of this algorithm results in the most optimal allocation of security investments for reducing the impact of a cyberattack.

The team's findings appear in a paper presented at this year's IEEE Symposium on Security and Privacy, the premier conference in the area of computer security. The team comprises Purdue professors Shreyas Sundaram and Timothy Cason and former PhD students Mustafa Abdallah and Daniel Woods.

"No one has an infinite security budget. You must decide how much to invest in each of your assets so that you gain a bump in the security of the overall system," Bagchi said.

The power grid, for example, is so interconnected that the security decisions of one power utility company can greatly impact the operations of other electrical plants. If the computers controlling one area's generators don't have adequate security protection, as seen when Russian hackers accessed control rooms at U.S. utilities, then a hack to those computers would disrupt energy flow to another area's generators, forcing them to shut down.

Since not all of the grid's utilities have the same security budget, it can be hard to ensure that critical points of entry to the grid's controls get the most investment in security protection.

The algorithm that Purdue researchers developed would incentivize each security decision maker to allocate security investments in a way that limits the cumulative damage a ransomware attack could cause. An attack on a single generator, for instance, would have less impact than an attack on the controls for a network of generators, which sophisticated grid-disruption malware can target at scale, rather than for the protection of a single generator.

Building an algorithm that considers the effects of human behavior

Bagchi's research shows how to increase cybersecurity in ways that address the interconnected nature of critical infrastructure but don't require an overhaul of the entire infrastructure system to be implemented.

As director of Purdue's Center for Resilient Infrastructures, Systems, and Processes, Bagchi has worked with the U.S. Department of Defense, Northrop Grumman Corp., Intel Corp., Adobe Inc., Google LLC and IBM Corp. on adopting solutions from his research. Bagchi's work has revealed the advantages of establishing an automatic response to attacks, and analyses like Symantec's Dragonfly report highlight energy-sector risks, leading to key innovations against ransomware threats, such as more effective ways to make decisions about backing up data.

There's a compelling reason why incentivizing good security decisions would work, Bagchi said. He and his team designed the algorithm based on findings from the field of behavioral economics, which studies how people make decisions with money.

"Before our work, not much computer security research had been done on how behaviors and biases affect the best defense mechanisms in a system. That's partly because humans are terrible at evaluating risk and an algorithm doesn't have any human biases," Bagchi said. "But for any system of reasonable complexity, decisions about security investments are almost always made with humans in the loop. For our algorithm, we explicitly consider the fact that different participants in an infrastructure system have different biases."

To develop the algorithm, Bagchi's team started by playing a game. They ran a series of experiments analyzing how groups of students chose to protect fake assets with fake investments. As in past studies in behavioral economics, they found that most study participants guessed poorly which assets were the most valuable and should be protected from security attacks. Most study participants also tended to spread out their investments instead of allocating them to one asset even when they were told which asset is the most vulnerable to an attack.

Using these findings, the researchers designed an algorithm that could work two ways: Either security decision makers pay a tax or fine when they make decisions that are less than optimal for the overall security of the system, or security decision makers receive a payment for investing in the most optimal manner.

"Right now, fines are levied as a reactive measure if there is a security incident. Fines or taxes don't have any relationship to the security investments or data of the different operators in critical infrastructure," Bagchi said.

In the researchers' simulations of real-world infrastructure systems, the algorithm successfully minimized the likelihood of losing assets to an attack that would decrease the overall security of the infrastructure system.

Bagchi's research group is working to make the algorithm more scalable and able to adapt to an attacker who may make multiple attempts to hack into a system. The researchers' work on the algorithm is funded by the National Science Foundation, the Wabash Heartland Innovation Network and the Army Research Lab.

Cybersecurity is an area of focus through Purdue's Next Moves, a set of initiatives that works to address some of the greatest technology challenges facing the U.S. Purdue's cybersecurity experts offer insights and assistance to improve the protection of power plants, electrical grids and other critical infrastructure.

Related News

• Electricity Forum News

• Grid Technologies News