ABB starts up photovoltaic solar plant in Spain

California Electricity Reserve Mandate requires 3.3 GW of new capacity to bolster grid reliability amid solar power volatility, peak demand, and wildfire-driven blackouts, as CPUC directs PG&E, Edison, and Sempra to procure resource adequacy.

Key Points

A CPUC order for utilities to add 3.3 GW of reserves, safeguarding grid reliability during variable renewables and peaks

✅ 3.3 GW procurement to meet resource adequacy targets

✅ Focus on grid reliability during peak evening demand

✅ Prioritizes renewables, storage; limits new fossil builds

As if California doesn’t have enough problems with its electric service, now state regulators warn the state may be short on power supplies by 2021 if utilities don’t start lining up new resources now.

In the hopes of heading off a shortfall as America goes electric, the California Public Utilities Commission has ordered the state’s electricity providers to secure 3.3 additional gigawatts of reserve supplies. That’s enough to power roughly 2.5 million homes. Half of it must be in place by 2021 and the rest by August 2023.

The move comes as California is already struggling to accommodate increasingly large amounts of solar power that regularly send electricity prices plunging below zero and force other generators offline so the region’s grid doesn’t overload. The state is also still reeling from a series of deliberate mass blackouts that utilities imposed last month to keep their power lines from sparking wildfires amid strong winds. And its largest power company, PG&E Corp., went bankrupt in January.

Now as natural gas-fired power plants retire under the state’s climate policies, officials are warning the state could run short on electricity on hot evenings, when solar production fades and commuters get home and crank up their air conditioners. “We have fewer resources that can be quickly turned on that can meet those peaks,” utilities commission member Liane Randolph said Thursday before the panel approved the order to beef up reserves.

The 3.3 gigawatts that utilities must line up is in addition to a state rule requiring them to sign contracts for 15% more electricity than they expect to need. Some critics question the need for added supplies, particularly after the state went on a plant-building boom in the 2000s.

But California’s grid managers say the risk of a shortfall is real and could be as high as 4.7 gigawatts, especially during heat waves that test the grid again. Mark Rothleder, with the California Independent System Operator, said the 15% cushion is a holdover from the days before big solar and wind farms made the grid more volatile. Now it may need to be increased, he said.

“We’re not in that world anymore,” said Rothleder, the operator’s vice president of state regulatory affairs. “The complexity of the system and the resources we have now are much different.”

The state’s three major utilities, PG&E, Edison International and Sempra Energy, will be largely responsible for securing new supplies. The commission banned fossil fuels from being used at any new power generators built to meet the requirement — though it left the door open for expansions at existing ones.

Some analysts argue California is exporting its energy policies to Western states, making electricity more costly and less reliable.

PG&E said in an emailed statement that it was pleased the commission didn’t adopt an earlier proposal to require 4 gigawatts of additional resources. Edison similarly said it was “supportive.” Sempra didn’t immediately respond with comment.

Extending Deadlines

The pending plant closures are being hastened by a 2020 deadline requiring California’s coastal generators to stop using aging seawater-cooling systems. Some gas-fired power plants have said they’ll simply close instead of installing costly new cooling systems. So the commission on Thursday also asked California water regulators to extend the deadline for five plants.

The Sierra Club, meanwhile, called on regulators to turn away from fossil fuels altogether, saying their decision Thursday “sets California back on its progress toward a clean energy future.”

The move to push back the deadline also faces opposition from neighboring towns. Redondo Beach Mayor Bill Brand, whose city is home to one of the plants in line for an extension, told the commission it wasn’t necessary, since California utilities already have plenty of electricity reserves.

“It’s just piling on to that reserve margin,” Brand said.

Related News

• Electricity Forum News

• Energy Policy News

US Climate Alliance 100% Renewables 2035 accelerates clean energy, electrification, and decarbonization, replacing coal and gas with wind, solar, and storage to cut air pollution, lower energy bills, create jobs, and advance environmental justice.

Key Points

A state-level target for alliance members to meet all electricity demand with renewable energy by 2035.

✅ 100% RES can meet rising demand from electrification

✅ Major health gains from reduced SO2, NOx, and particulates

✅ Jobs grow, energy burdens fall, climate resilience improves

The Union of Concerned Scientists joined with COPAL (Minnesota), GreenRoots (Massachusetts), and the Michigan Environmental Justice Coalition, to better understand the feasibility and implications of leadership states meeting 100 percent of their electricity needs with renewable energy by 2035, a target reflected in federal clean electricity goals under discussion today.

We focused on 24 member states of the United States Climate Alliance, a bipartisan coalition of governors committed to the goals of the 2015 Paris Climate Agreement. We analyzed two main scenarios: business as usual versus 100 percent renewable electricity standards, in line with many state clean energy targets now in place.

Our analysis shows that:

Climate Alliance states can meet 100 percent of their electricity consumption with renewable energy by 2035, as independent assessments of zero-emissions feasibility suggest. This holds true even with strong increases in demand due to the electrification of transportation and heating.

A transition to renewables yields strong benefits in terms of health, climate, economies, and energy affordability.

To ensure an equitable transition, states should broaden access to clean energy technologies and decision making to include environmental justice and fossil fuel-dependent communitieswhile directly phasing out coal and gas plants.

Demands for climate action surround us. Every day brings news of devastating "this is not normal" extreme weather: record-breaking heat waves, precipitation, flooding, wildfires. To build resilience and mitigate the worst impacts of the climate crisis requires immediate action to reduce heat-trapping emissions and transition to renewable energy, including practical decarbonization strategies adopted by states.

On the Road to 100 Percent Renewables explores actions at one critical level: how leadership states can address climate change by reducing heat-trapping emissions in key sectors of the economy as well as by considering the impacts of our energy choices. A collaboration of the Union of Concerned Scientists and local environmental justice groups COPAL (Minnesota), GreenRoots (Massachusetts), and the Michigan Environmental Justice Coalition, with contributions from the national Initiative for Energy Justice, assessed the potential to accelerate the use of renewable energy dramatically through state-level renewable electricity standards (RESs), major drivers of clean energy in recent decades. In addition, the partners worked with Greenlink Analytics, an energy research organization, to assess how RESs most directly affect people's lives, such as changes in public health, jobs, and energy bills for households.

Focusing on 24 members of the United States Climate Alliance (USCA), the study assesses the implications of meeting 100 percent of electricity consumption in these states, including examples like Rhode Island's 100% by 2030 plan that inform policy design, with renewable energy in the near term. The alliance is a bipartisan coalition of governors committed to reducing heat-trapping emissions consistent with the goals of the 2015 Paris climate agreement.[1]

On the Road to 100 Percent Renewables looks at three types of results from a transition to 100 percent RES policies: improvements in public health from decreasing the use of coal and gas2 power plants; net job creation from switching to more labor-oriented clean energy; and reduced household energy bills from using cleaner sources of energy. The study assumes a strong push to electrify transportation and heating to address harmful emissions from the current use of fossil fuels in these sectors. Our core policy scenario does not focus on electricity generation itself, nor does it mandate retiring coal, gas, and nuclear power plants or assess new policies to drive renewable energy in non-USCA states.

Our analysis shows that:

USCA states can meet 100 percent of their electricity consumption with renewable energy by 2035 even with strong increases in demand due to electrifying transportation and heating.

A transition to renewables yields strong benefits in terms of health, climate, economies, and energy affordability.

Renewable electricity standards must be paired with policies that address not only electricity consumption but also electricity generation, including modern grid infrastructure upgrades that enable higher renewable shares, both to transition away from fossil fuels more quickly and to ensure an equitable transition in which all communities experience the benefits of a clean energy economy.

Currently, the states in this analysis meet their electricity needs with differing mixes of electricity sourcesfossil fuels, nuclear, and renewables. Yet across the states, the study shows significant declines in fossil fuel use from transitioning to clean electricity; the use of solar and wind powerthe dominant renewablesgrows substantially:

In the study's "No New Policy" scenario"business as usual"coal and gas generation stay largely at current levels over the next two decades. Electricity generation from wind and solar grows due to both current policies and lowest costs.

In a "100% RES" scenario, each USCA state puts in place a 100 percent renewable electricity standard. Gas generation falls, although some continues for export to non-USCA states. Coal generation essentially disappears by 2040. Wind and solar generation combined grow to seven times current levels, and three times as much as in the No New Policy scenario.

A focus on meeting in-state electricity consumption in the 100% RES scenario yields important outcomes. Reductions in electricity from coal and gas plants in the USCA states reduce power plant pollution, including emissions of sulfur dioxide and nitrogen oxides. By 2040, this leads to 6,000 to 13,000 fewer premature deaths than in the No New Policy scenario, as well as 140,000 fewer cases of asthma exacerbation and 700,000 fewer lost workdays. The value of the additional public health benefits in the USCA states totals almost $280 billion over the two decades. In a more detailed analysis of three USCA statesMassachusetts, Michigan, and Minnesotathe 100% RES scenario leads to almost 200,000 more added jobs in building and installing new electric generation capacity than the No New Policy scenario.

The 100% RES scenario also reduces average energy burdens, the portion of household income spent on energy. Even considering household costs solely for electricity and gas, energy burdens in the 100% RES scenario are at or below those in the No New Policy scenario in each USCA state in most or all years. The average energy burden across those states declines from 3.7 percent of income in 2020 to 3.0 percent in 2040 in the 100% RES scenario, compared with 3.3 percent in 2040 in the No New Policy scenario.

Decreasing the use of fossil fuels through increasing the use of renewables and accelerating electrification reduces emissions of carbon dioxide (CO2), with implications for climate, public health, and economies. Annual CO2 emissions from power plants in USCA states decrease 58 percent from 2020 to 2040 in the 100% RES scenario compared with 12 percent in the No New Policy scenario.

The study also reveals gaps to be filled beyond eliminating fossil fuel pollution from communities, such as the persistence of gas generation to sell power to neighboring states, reflecting barriers to a fully renewable grid that policy must address. Further, it stresses the importance of policies targeting just and equitable outcomes in the move to renewable energy.

Moving away from fossil fuels in communities most affected by harmful air pollution should be a top priority in comprehensive energy policies. Many communities continue to bear far too large a share of the negative impacts from decades of siting the infrastructure for the nation's fossil fuel power sector in or near marginalized neighborhoods. This pattern will likely persist if the issue is not acknowledged and addressed. State policies should mandate a priority on reducing emissions in communities overburdened by pollution and avoiding investments inconsistent with the need to remove heat-trapping emissions and air pollution at an accelerated rate. And communities must be centrally involved in decisionmaking around any policies and rules that affect them directly, including proposals to change electricity generation, both to retire fossil fuel plants and to build the renewable energy infrastructure.

Key recommendations in On the Road to 100 Percent Renewables address moving away from fossil fuels, increasing investment in renewable energy, and reducing CO2 emissions. They aim to ensure that communities most affected by a history of environmental racism and pollution share in the benefits of the transition: cleaner air, equitable access to good-paying jobs and entrepreneurship alternatives, affordable energy, and the resilience that renewable energy, electrification, energy efficiency, and energy storage can provide. While many communities can benefit from the transition, strong justice and equity policies will avoid perpetuating inequities in the electricity system. State support to historically underserved communities for investing in solar, energy efficiency, energy storage, and electrification will encourage local investment, community wealth-building, and the resilience benefits the transition to renewable energy can provide.

A national clean electricity standard and strong pollution standards should complement state action to drive swift decarbonization and pollution reduction across the United States. Even so, states are well positioned to simultaneously address climate change and decades of inequities in the power system. While it does not substitute for much-needed national and international leadership, strong state action is crucial to achieving an equitable clean energy future.

Related News

• Electricity Forum News

• Renewable Energy News

Ukraine Nuclear Plant Ownership Proposal outlines U.S. management of Ukrainian reactors amid the Russia-Ukraine war, citing nuclear safety, energy security, and IAEA oversight; Kyiv rejects ownership transfer, especially regarding Zaporizhzhia under Russian control.

Key Points

U.S. control of Ukraine's nuclear plants for safety; Kyiv rejects transfer, citing sovereignty risks at Zaporizhzhia.

✅ U.S. proposal to manage Ukraine's reactors amid war

✅ Kyiv refuses ownership transfer; open to investment

✅ Zaporizhzhia under Russian control raises safety risks

In the midst of the ongoing conflict between Russia and Ukraine, U.S. President Donald Trump has proposed a controversial idea: Ukraine should give its nuclear power plants to the United States for safekeeping and management. This suggestion came during a phone call with Ukrainian President Volodymyr Zelenskyy, wherein Trump expressed the belief that American ownership of these nuclear plants could offer them the best protection amid the ongoing war. But Kyiv, while open to foreign support, has firmly rejected the idea of transferring ownership, especially as the Zaporizhzhia nuclear plant remains under Russian occupation.

Ukraine’s nuclear energy infrastructure has always been a vital component of its power generation. Before the war, the country’s four nuclear plants supplied nearly half of its electricity. As Russia's military forces target Ukraine's energy infrastructure, including power plants and coal mines, international watchdogs like the IAEA have warned of nuclear risks as these nuclear facilities have become crucial to maintaining the nation’s energy stability. The Zaporizhzhia plant, in particular, has attracted international concern due to its size and the ongoing threat of a potential nuclear disaster.

Trump’s Proposal and Ukraine’s Response

Trump’s proposal of U.S. ownership came as a response to the ongoing threats posed by Russia’s occupation of the Zaporizhzhia plant. Trump argued that the U.S., with its expertise in running nuclear power plants, could safeguard these facilities from further damage and potential nuclear accidents. However, Zelenskyy quickly clarified that the discussion was only focused on the Zaporizhzhia plant, which is currently under Russian control. The Ukrainian president emphasized that Kyiv would not entertain the idea of permanently transferring ownership of its nuclear plants, even though they would welcome investment in their restoration and modernization, particularly after the war.

The Zaporizhzhia nuclear plant has been a focal point of geopolitical tensions since Russia's occupation in 2022. Despite being in "cold shutdown" to prevent further risk of explosions, the facility remains a major concern due to its potential to cause a nuclear disaster. Ukrainian officials, along with international observers, have raised alarm about the safety risks posed by the plant, including mines at Zaporizhzhia reported by UN watchdogs, which is situated in a war zone and under the control of Russian forces who are reportedly neglecting proper safety protocols.

The Fear of a Nuclear Provocation

Ukrainians have expressed concerns that Trump’s proposal could embolden Russia to escalate tensions further, even as a potential agreement on power-plant attacks has been discussed by some parties. Some fear that any attempt to reclaim the plant by Ukraine could trigger a Russian provocation, including a deliberate attack on the plant, which would have catastrophic consequences for both Ukraine and the broader region. The analogy is drawn with the destruction of the Nova Kakhovka dam, which Ukraine accuses Russia of sabotaging, an act that severely disrupted water supplies to the Zaporizhzhia plant. Ukrainian military officials, including Ihor Romanenko, a former deputy head of Ukraine’s armed forces, warned that Trump’s suggestion might be an exploitation of Ukraine’s vulnerable position in the ongoing war.

Despite these fears, there are some voices within Ukraine, including former employees of the Zaporizhzhia plant, who believe that a deliberate attack by Russian forces is unlikely. They argue that the Russian military needs the plant in functioning condition for future negotiations, with Russia building new power lines to reactivate the site as part of that calculus, and any damage could reduce its value in such exchanges. However, the possibility of Russian negligence or mismanagement remains a significant risk.

The Strategic Role of Ukraine's Nuclear Plants

Ukraine's nuclear plants were a cornerstone of the country’s energy sector long before the conflict began. In recent years, as Ukraine lost access to coal resources in the Donbas region due to Russian occupation, nuclear power became even more vital, alongside a growing focus on wind power to improve resilience. The country’s reliance on these plants grew as Russia launched a sustained campaign to destroy Ukraine’s energy infrastructure, including attacks on nuclear power stations.

The Zaporizhzhia plant, in particular, holds strategic importance not only due to its size but also because of its location in southeastern Ukraine, an area that has been at the heart of the conflict. Despite being in Russian hands, the plant’s reactors have been safely shut down, reducing the immediate risk of a nuclear explosion. However, the plant’s future remains uncertain, as Russia’s long-term control over it could disrupt Ukraine’s energy security for years to come.

Wider Concerns About Aging Nuclear Infrastructure

Beyond the geopolitical tensions, there are broader concerns about the aging infrastructure of Ukraine's nuclear power plants. International watchdogs, including the environmentalist group Bankwatch, have criticized these facilities as “zombie reactors” due to their outdated designs and safety risks. Experts have called for Ukraine to decommission some of these reactors, fearing that they are increasingly unsafe, especially in the context of a war.

However, Ukrainian officials, including Petro Kotin, head of Energoatom (Ukraine's state-owned nuclear energy company), argue that these reactors are still functional and critical to Ukraine's energy needs. The ongoing conflict, however, complicates efforts to modernize and secure these facilities, which are increasingly vulnerable to both physical damage and potential nuclear hazards.

The Global Implications

Trump's suggestion to take control of Ukraine's nuclear power plants has raised significant concerns on the international stage. Some fear that such a move could set a dangerous precedent for nuclear security and sovereignty. Others see it as an opportunistic proposal that exploits Ukraine's wartime vulnerability.

While the future of Ukraine's nuclear plants remains uncertain, one thing is clear: these facilities are now at the center of a geopolitical struggle that could have far-reaching consequences for the energy security of Europe and the world. The safety of these plants and their role in Ukraine's energy future will remain a critical issue as the war continues and as Ukraine navigates its relations with both the U.S. and Russia, with the grid even having resumed electricity exports at times.

Related News

• Electricity Forum News

• Power Generation News

Germany Solar Cap Removal would accelerate photovoltaics, storage, and renewables, replacing coal and nuclear during phaseout with 10GW per year toward 162GW by 2030, boosting grid resilience, O&M jobs, and domestic clean energy growth.

Key Points

A policy change to scrap the 52GW limit, enabling 10GW/year PV and storage to replace coal and nuclear capacity.

✅ Scrap 52GW cap to prevent post-2020 market slump

✅ Add 10GW PV annually; scale residential, commercial, grid storage

✅ Create jobs in planning, installation, and O&M through 2030

The German Solar Association (BSW) has called on the government to remove barriers to the development of new solar power capacity in Germany and storage capacity needed to replace coal and nuclear generation that is being phased out.

A 52GW cap should be scrapped, otherwise there is a risk that a market slump will occur in the solar industry after 2020, BSW said, especially as U.S. solar expansion plans signal accelerating global demand.

BSW managing director Carsten Körnig said: “Time is running out, and further delays are irresponsible. The 52GW mark will already be reached within a few months.”
A new report from BSW, in cooperation with Bonn-based marketing and social research company EuPD Research and The smarter E Europe initiative, said 10GW a year is needed as well as an increase in battery storage capacity.

This would lead to cumulative photovoltaic capacity of 162GW and 15GW residential, commercial and grid storage systems by 2030, in line with global renewable records being set, leading to new job opportunities.

The number of jobs in the domestic photovoltaic and storage industries could increase to 78,000 by the end of the next decade from today’s level of 26,400, aligning with forecasts of wind and solar reaching 50% by mid-century, said 'The Energy Transition in the Context of the Nuclear and Coal Phaseout – Perspectives in the Electricity Market to 2040' study.

Job growth would take place for the most part in the fields of planning, installation and operations and maintenance of PV systems, as solar uptake in Poland increases, the report said.

In maintenance alone, employment would increase from 9,200 to 26,000, with additional opened up by tapping into the market potential of medium- to long-term storage systems, alongside changing electricity prices in Northern Europe that favor flexibility, it said.

The report added that industry revenue could grow from €5bn to €12.5bn in the coming decade.

The report was supported by BayWa Re E3/DC, Fronius, Goldbeck Solar, IBC Solar, Panasonic, Sharp, Siemens, Sonnen, Suntech, Tesvolt and Varta.

Related News

• Electricity Forum News

• Renewable Energy News

EPA Power Plant Emissions Rule proposes strict greenhouse gas limits for coal and gas units, leveraging carbon capture (CCS) under the Clean Air Act to cut CO2 and accelerate decarbonization of the U.S. grid.

Key Points

A proposed EPA rule setting CO2 limits for coal and gas plants, using CCS to cut power-sector greenhouse gases.

✅ Applies to existing and new coal and large gas units

✅ Targets near-zero CO2 by 2038 via CCS or retirement

✅ Cites grid, health, and climate benefits; faces legal challenges

The Biden administration has proposed new limits on greenhouse gas emissions from coal- and gas-fired power plants, its most ambitious effort yet to roll back planet-warming pollution from the nation’s second-largest contributor to climate change.

A rule announced by the Environmental Protection Agency could force power plants to capture smokestack emissions using a technology that has long been promised but is not used widely in the United States, and arrives amid changes stemming from the NEPA rewrite that affect project reviews.

“This administration is committed to meeting the urgency of the climate crisis and taking the necessary actions required,″ said EPA Administrator Michael Regan.

The plan would not only “improve air quality nationwide, but it will bring substantial health benefits to communities all across the country, especially our front-line communities ... that have unjustly borne the burden of pollution for decades,” Regan said in a speech at the University of Maryland.

President Joe Biden, whose climate agenda includes a clean electricity standard as a key pillar, called the plan “a major step forward in the climate crisis and protecting public health.”

If finalized, the proposed regulation would mark the first time the federal government has restricted carbon dioxide emissions from existing power plants, following a Trump-era replacement of Obama’s power plant overhaul, which generate about 25% of U.S. greenhouse gas pollution, second only to the transportation sector. The rule also would apply to future electric plants and would avoid up to 617 million metric tons of carbon dioxide through 2042, equivalent to annual emissions of 137 million passenger vehicles, the EPA said.

Almost all coal plants — along with large, frequently used gas-fired plants — would have to cut or capture nearly all their carbon dioxide emissions by 2038, the EPA said, a timeline that echoed concerns raised during proposed electricity pricing changes in the prior administration. Plants that cannot meet the new standards would be forced to retire.

The plan is likely to be challenged by industry groups and Republican-leaning states, much like litigation over the Affordable Clean Energy rule unfolded in recent years. They have accused the Democratic administration of overreach on environmental regulations and warn of a pending reliability crisis for the electric grid. The power plant rule is one of at least a half-dozen EPA rules limiting power plant emissions and wastewater treatment rules.

“It’s truly an onslaught” of government regulation “designed to shut down the coal fleet prematurely,″ said Rich Nolan, president and CEO of the National Mining Association.

Regan denied that the power plant rule was aimed at shutting down the coal sector, but acknowledged — even after the end to the 'war on coal' rhetoric — “We will see some coal retirements.”

Related News

• Electricity Forum News

• Energy Policy News

Infrastructure Security Algorithm prioritizes cyber defense for power grids and critical infrastructure, mitigating ransomware, blackout risks, and cascading failures by guiding utilities, regulators, and cyber insurers on optimal security investment allocation.

Key Points

An algorithm that optimizes security spending to cut ransomware and blackout risks across critical infrastructure.

✅ Guides utilities on optimal security allocation

✅ Uses incentives to correct human risk biases

✅ Prioritizes assets to prevent cascading outages

Millions of people could suddenly lose electricity if a ransomware attack just slightly tweaked energy flow onto the U.S. power grid, as past US utility intrusions have shown.

No single power utility company has enough resources to protect the entire grid, but maybe all 3,000 of the grid's utilities could fill in the most crucial security gaps if there were a map showing where to prioritize their security investments.

Purdue University researchers have developed an algorithm to create that map. Using this tool, regulatory authorities or cyber insurance companies could establish a framework for protecting the U.S. power grid that guides the security investments of power utility companies to parts of the grid at greatest risk of causing a blackout if hacked.

Power grids are a type of critical infrastructure, which is any network - whether physical like water systems or virtual like health care record keeping - considered essential to a country's function and safety. The biggest ransomware attacks in history have happened in the past year, affecting most sectors of critical infrastructure in the U.S. such as grain distribution systems in the food and agriculture sector and the Colonial Pipeline, which carries fuel throughout the East Coast, prompting increased military preparation for grid hacks in the U.S.

With this trend in mind, Purdue researchers evaluated the algorithm in the context of various types of critical infrastructure in addition to the power sector, including electricity-sector IoT devices that interface with grid operations. The goal is that the algorithm would help secure any large and complex infrastructure system against cyberattacks.

"Multiple companies own different parts of infrastructure. When ransomware hits, it affects lots of different pieces of technology owned by different providers, so that's what makes ransomware a problem at the state, national and even global level," said Saurabh Bagchi, a professor in the Elmore Family School of Electrical and Computer Engineering and Center for Education and Research in Information Assurance and Security at Purdue. "When you are investing security money on large-scale infrastructures, bad investment decisions can mean your power grid goes out, or your telecommunications network goes out for a few days."

Protecting infrastructure from hacks by improving security investment decisions

The researchers tested the algorithm in simulations of previously reported hacks to four infrastructure systems: a smart grid, industrial control system, e-commerce platform and web-based telecommunications network. They found that use of this algorithm results in the most optimal allocation of security investments for reducing the impact of a cyberattack.

The team's findings appear in a paper presented at this year's IEEE Symposium on Security and Privacy, the premier conference in the area of computer security. The team comprises Purdue professors Shreyas Sundaram and Timothy Cason and former PhD students Mustafa Abdallah and Daniel Woods.

"No one has an infinite security budget. You must decide how much to invest in each of your assets so that you gain a bump in the security of the overall system," Bagchi said.

The power grid, for example, is so interconnected that the security decisions of one power utility company can greatly impact the operations of other electrical plants. If the computers controlling one area's generators don't have adequate security protection, as seen when Russian hackers accessed control rooms at U.S. utilities, then a hack to those computers would disrupt energy flow to another area's generators, forcing them to shut down.

Since not all of the grid's utilities have the same security budget, it can be hard to ensure that critical points of entry to the grid's controls get the most investment in security protection.

The algorithm that Purdue researchers developed would incentivize each security decision maker to allocate security investments in a way that limits the cumulative damage a ransomware attack could cause. An attack on a single generator, for instance, would have less impact than an attack on the controls for a network of generators, which sophisticated grid-disruption malware can target at scale, rather than for the protection of a single generator.

Building an algorithm that considers the effects of human behavior

Bagchi's research shows how to increase cybersecurity in ways that address the interconnected nature of critical infrastructure but don't require an overhaul of the entire infrastructure system to be implemented.

As director of Purdue's Center for Resilient Infrastructures, Systems, and Processes, Bagchi has worked with the U.S. Department of Defense, Northrop Grumman Corp., Intel Corp., Adobe Inc., Google LLC and IBM Corp. on adopting solutions from his research. Bagchi's work has revealed the advantages of establishing an automatic response to attacks, and analyses like Symantec's Dragonfly report highlight energy-sector risks, leading to key innovations against ransomware threats, such as more effective ways to make decisions about backing up data.

There's a compelling reason why incentivizing good security decisions would work, Bagchi said. He and his team designed the algorithm based on findings from the field of behavioral economics, which studies how people make decisions with money.

"Before our work, not much computer security research had been done on how behaviors and biases affect the best defense mechanisms in a system. That's partly because humans are terrible at evaluating risk and an algorithm doesn't have any human biases," Bagchi said. "But for any system of reasonable complexity, decisions about security investments are almost always made with humans in the loop. For our algorithm, we explicitly consider the fact that different participants in an infrastructure system have different biases."

To develop the algorithm, Bagchi's team started by playing a game. They ran a series of experiments analyzing how groups of students chose to protect fake assets with fake investments. As in past studies in behavioral economics, they found that most study participants guessed poorly which assets were the most valuable and should be protected from security attacks. Most study participants also tended to spread out their investments instead of allocating them to one asset even when they were told which asset is the most vulnerable to an attack.

Using these findings, the researchers designed an algorithm that could work two ways: Either security decision makers pay a tax or fine when they make decisions that are less than optimal for the overall security of the system, or security decision makers receive a payment for investing in the most optimal manner.

"Right now, fines are levied as a reactive measure if there is a security incident. Fines or taxes don't have any relationship to the security investments or data of the different operators in critical infrastructure," Bagchi said.

In the researchers' simulations of real-world infrastructure systems, the algorithm successfully minimized the likelihood of losing assets to an attack that would decrease the overall security of the infrastructure system.

Bagchi's research group is working to make the algorithm more scalable and able to adapt to an attacker who may make multiple attempts to hack into a system. The researchers' work on the algorithm is funded by the National Science Foundation, the Wabash Heartland Innovation Network and the Army Research Lab.

Cybersecurity is an area of focus through Purdue's Next Moves, a set of initiatives that works to address some of the greatest technology challenges facing the U.S. Purdue's cybersecurity experts offer insights and assistance to improve the protection of power plants, electrical grids and other critical infrastructure.

Related News

• Electricity Forum News

• Grid Technologies News