2015 set as gases deadline

California income-based utility charges face bipartisan pushback as the PUC weighs fixed fees for PG&E, SDG&E, and Southern California Edison, reshaping rate design, electricity affordability, energy equity, and privacy amid proposed per-kWh reductions.

Key Points

PUC-approved fixed fees tied to household income for PG&E, SDG&E, and SCE, offset by lower per-kWh rates.

✅ Proposed fixed fees: $51 SCE, $73.31 SDG&E, $50.92 PG&E

✅ Critics warn admin, privacy, legal risks and higher bills for savers

✅ Backers say lower-income pay less; kWh rates cut ~33% in PG&E area

Efforts are being made across California's political landscape to derail a legislative initiative that introduced income-based utility charges for customers of Southern California Edison and other major utilities.

Legislators from both the Democratic and Republican parties have proposed bills aimed at nullifying the 2022 legislation that established a sliding scale for utility charges based on customer income, a decision made in a late-hour session and subsequently endorsed by Governor Gavin Newsom.

The plan, pending final approval from the state Public Utilities Commission (PUC) — all of whose current members were appointed by Governor Newsom — would enable utilities like Southern California Edison, San Diego Gas & Electric, and PG&E to apply new income-based charges as early as this July.

Among the state legislators pushing back against the income-based charge scheme are Democrats Jacqui Irwin and Marc Berman, along with Republicans Janet Nguyen, Kelly Seyarto, Rosilicie Ochoa Bogh, Scott Wilk, Brian Dahle, Shannon Grove, and Roger Niello.

A cadre of specialists, including economist Ahmad Faruqui who has advised all three utilities implicated in the fee proposal, have outlined several concerns regarding the PUC's pending decision.

Faruqui and his colleagues argue that the proposed charges are excessively high in comparison to national standards, reflecting soaring electricity prices across the state, potentially leading to administrative challenges, legal disputes, and negative unintended outcomes, such as penalizing energy-conservative consumers.

Advocates for the income-based fee model, including The Utility Reform Network (TURN) and the National Resources Defense Council, argue it would result in higher charges for wealthier consumers and reduced fees for those with lower incomes. They also believe that the utilities plan to decrease per kilowatt-hour rates as part of a broader rate structure review to balance out the new fees.

However, even supporters like TURN and the Natural Resources Defense Council acknowledge that the income-based fee model is not a comprehensive solution to making soaring electricity bills more affordable.

If implemented, California would have the highest income-based utility fees in the country, with averages far surpassing the national average of $11.15, as reported by EQ Research:

• Southern California Edison would charge $51.
• San Diego Gas & Electric would levy $73.31.
• PG&E would set fees at $50.92.

The proposal has raised concerns among state legislators about the additional financial burden on Californians already struggling with high electricity costs.

Critics highlight several practical challenges, including the PUC's task of assessing customers' income levels, a process fraught with privacy concerns, potential errors, and constitutional questions regarding access to tax information.

Economists have pointed out further complications, such as the difficulty in accurately assessing incomes for out-of-state property owners and the variability of customers' incomes over time.

The proposed income-based charges would differ by income bracket within the PG&E service area, for example, with lower-income households facing lower fixed charges and higher-income households facing higher charges, alongside a proposed 33% reduction in electricity rates to help mitigate the fixed charge impact.

Yet, the economists warn that most customers, particularly low-usage customers, could end up paying more, essentially rewarding higher consumption and penalizing efficiency.

This legislative approach, they caution, could inadvertently increase costs for moderate users across all income brackets, a sign of major changes to electric bills that could emerge, challenging the very goals it aims to achieve by promoting energy inefficiency.

Related News

• Electricity Forum News

• Energy Policy News

UK power grid bottleneck is stalling renewable energy, with connection queues, planning delays, and transmission infrastructure gaps raising costs, slowing decarbonization, and deterring investment as government considers reforms led by a new chief adviser.

Key Points

Delays and capacity gaps that hinder connecting new generation and demand, raising costs and slowing decarbonization.

✅ Connection queues delay projects for years

✅ Planning and NIMBY barriers stall transmission builds

✅ Investment costs on bills risk political pushback

During his three decades at investment bank Morgan Stanley, Franck Petitgas developed a reputation for solving problems that vexed others. Fixing the UK’s creaking power grid could be his most challenging task yet.

Earlier this year, Prime Minister Rishi Sunak appointed Petitgas as his chief business adviser, and the former financier has been pushing to tackle the gridlock that’s left projects waiting endlessly for a connection, an issue he sees as one of the biggest problems for industry.

But there are no easy solutions to tackle the years-long queue to get on the grid or the drawn-out planning process for building clean power generation, with the energy transition stalled by supply delays compounding the problem. And sluggish progress in expanding and improving the electricity network is preventing the construction of new housing developments and offices, as well as slowing the transition to greener power.

That transition has already taken a knock after Sunak last week controversially watered down some of the UK’s climate ambitions, citing in part the cost to consumers. He also acknowledged the issues surrounding the grid and promised the “most transformative plans” in response, drawing on lessons from Europe’s power crisis where applicable. Those are due to be unveiled within weeks. 

Shortly after his appointment, Petitgas offered reassurances to business leaders at a meeting in Downing Street that solutions were being worked on, according to people familiar with the matter. But there’s a lack of confidence across business that enough will be done.

Cost is a big factor in the expansion of the electricity grid, and some argue a state-owned generation model could ease bills over time. Improving the onshore network alone could require investment of between £100 billion and £240 billion ($122-$293 billion) by 2050, according to a government analysis last year. 

With network expansion funded through power bills, that’s a big ask, particularly with Sunak trailing in polls ahead of an election expected next year.

“It’s very difficult for politicians to say more money should be on bills,” said Emma Pinchbeck, chief executive of Energy UK, a trade body. “So you get to a situation where no one wants to pay for the infrastructure investment until it’s really sticky, and that’s where we’ve got to with the grid.”

There are huge competitive and economic implications if the UK falls further behind. With US President Joe Biden spending an estimated $370 billion on climate measures through his Inflation Reduction Act, and China already a world leader in electric vehicles, Britain’s grid inaction is holding it back in the global race to decarbonize, said Jess Ralston, an analyst at the Energy and Climate Intelligence Unit think tank.

“The UK is dithering and delaying, and not making any strategic decisions,” she said. “You can see companies just saying ‘I’m going to the US, or I’m going to China’.” 

In a statement, the government said it’s a “priority to speed up the time taken to connect new power generators and power consumers to the grid.” It added that it’s taking “significant steps to accelerate grid infrastructure,” including support for new Channel interconnectors announced this year.

The government expects demand for electricity to double by 2035 and that will mean more generation that needs to be linked up to the network by cables and pylons. Local grids will also have to expand to accommodate more connection points for electric vehicles and homes, and invest in large-scale energy storage capacity to balance supply.

But so far, the rapid rise in renewable energy investment has not been accompanied by matching spend on the power network, according to BloombergNEF, a pattern seen in Germany’s grid expansion woes as well.

“The pace and scale of what we now have to deliver is significantly different from the last few decades,” said Carl Trowell, president of UK strategic infrastructure at National Grid. “It’s a national endeavor.”

In June, Electricity Networks Commissioner Nick Winser sent the government recommendations for how to accelerate construction of more transmission infrastructure. He said efforts to decarbonize the power sector will be “wasted if we cannot get the power to homes and businesses.”

“We need a seriously stronger sense of urgency,” said Kevin O’Donovan, country manager for Statkraft UK, which is holding off investment in four wind farms and two solar projects due to grid connection delays.

In addition to cost, the other major stumbling block is planning. Politicians in the governing Conservative Party are wary of angering voters with new infrastructure in rural areas that typically vote Tory. Across the country, “Not In My Back Yard” campaigners – NIMBYs — pose a major challenge to projects.

Petitgas, 62, retired from Morgan Stanley last year after nearly 30 years at the bank, where he led its international division from London. The issues over connections and planning have been repeatedly pointed out to Petitgas by investors and trade groups over a series of meetings this year, according to people familiar with the matter, requesting anonymity discussing private talks.

Yet with a general election looming and the issue plagued by political headaches, many are skeptical that Sunak can find the solutions needed.

One business chief said Downing Street considers the issue too tricky and expensive to tackle in the short-term. Others are concerned that while Petitgas has license from Sunak, he doesn’t have influence across the relevant departments to get grids to the top of the agenda.

Wind Farms

Multiple parts of the UK’s climate plans are under pressure. Earlier this month, an auction for contracts to build new wind farms received zero bids from developers, even as wind leads the power mix in many regions, marking yet another green setback. 

The UK is already behind on its target of having 50 gigawatts of offshore wind built by 2030, up from 14 GW today. The challenge is accelerating development without railroading local communities.

Within Sunak’s Conservative Party, some lawmakers are pushing back on new infrastructure in their local areas. A group including Environment Secretary Therese Coffey and former Home Secretary Priti Patel is campaigning against building new pylons across a stretch of eastern England.

According to Adam Bell, director of policy at consultancy Stonehaven, backbench pressure means Sunak is unlikely to take major action on the grid in the near term. He doesn’t see the prime minister accepting Winser’s recommendations, least of all accelerating planning decisions.

“Over the last year, Sunak has favored party management over things that will benefit the country,” Bell said. 

Related News

• Electricity Forum News

• Power Generation News

UK Energy Price Cap aims to protect consumers on gas and electricity bills, tackling Big Six overcharging on default and standard variable tariffs, with Ofgem and MPs pushing urgent reforms to the broken market.

Key Points

A temporary absolute limit on default energy tariffs to shield consumers from overcharging on gas and electricity bills.

✅ Caps standard variable and default tariffs to protect loyalty.

✅ Targets Big Six pricing; oversight by Ofgem and BEIS MPs.

✅ Aims for winter protection while maintaining competition.

MPs are calling for a cap on the price of gas and electricity, with questions over the expected cost of a UK price cap amid fears consumers are being ripped off.

The Business, Energy and Industrial Strategy (BEIS) Select Committee says the Big Six energy companies have been overcharging for years.

MPs on the committee backed plans for a temporary absolute cap, noting debates over EU gas price cap strategies to fix what they called a "broken" energy market.

Labour's Rachel Reeves, who chairs the committee, said: "The energy market is broken. Energy is an essential good and yet millions of customers are ripped off for staying loyal to their energy provider.

"An energy price cap is now necessary and the Government must act urgently to ensure it is in place to protect customers next winter.

"The Big Six energy companies might whine and wail about the introduction of a price cap but they've been overcharging their customers on default and SVTs (standard variable tariffs) for years and their recent feeble efforts to move consumers off these tariffs has only served to highlight the need for this intervention."

The Committee also criticised Ofgem for failing to protect customers, especially the most vulnerable.

Draft legislation for an absolute cap on energy tariffs was published by the Government last year, and later developments like the Energy Security Bill have kept reform on the agenda.

But Business Secretary Greg Clark refused to guarantee that the flagship plans would be in place by next winter, despite warnings about high winter energy costs for households.

Committee members said there was a "clear lack of will" on the part of the Big Six to do what was necessary, including exploring decoupling gas and electricity prices, to deal with pricing problems.

A report from the committee found that customers are paying £1.4bn a year more than they should be under the current system.

Around 12 million households are stuck on poor-value tariffs, according to the report.

National assistance charity Citizens Advice said "loyal and vulnerable" customers had been "ripped off" for too long.

Chief executive Gillian Guy said: "An absolute cap, as recommended by the committee, is crucial to securing protection for the largest number of customers while continuing to provide competition in the market. This should apply to all default tariffs."

Related News

• Electricity Forum News

• Energy Policy News

Hurricane Grid Resilience examines how utilities manage outages with renewables, microgrids, and robust transmission and distribution systems, balancing solar, wind, and batteries to restore service, harden infrastructure, and improve storm response and recovery.

Key Points

Hurricane grid resilience is a utility approach to withstand storms, reduce outages, and speed safe power restoration.

✅ Focus on T&D hardening, vegetation management, remote switching

✅ Balance generation mix; integrate solar, wind, batteries, microgrids

✅ Plan 12-hour shifts; automate forecasting and outage restoration

When operators of Duke Energy's control room in Raleigh, North Carolina wait for a hurricane, the mood is often calm in the hours leading up to the storm.

“Things are usually fairly quiet before the activity starts,” said Mark Goettsch, the systems operations manager at Duke. “We’re anxiously awaiting the first operation and the first event. Once that begins, you get into storm mode.”

Then begins a “frenzied pace” that can last for days — like when Hurricane Florence parked over Duke’s service territory in September.

When an event like Florence hits, all eyes are on transmission and distribution. Where it’s available, Duke uses remote switching to reconnect customers quickly. As outages mount, the utility forecasts and balances its generation with electricity demand.

The control center’s four to six operators work 12-hour shifts, while nearby staff members field thousands of calls and alarms on the system. After it’s over, “we still hold our breath a little bit to make sure we’ve operated everything correctly,” said Goettsch. Damage assessment and rebuilding can only begin once a storm passes.

That cycle is becoming increasingly common in utility service areas like Duke's.

A slate of natural disasters that reads like a roll call — Willa, Michael, Harvey, Irma, Maria, Florence and Thomas — has forced a serious conversation about resiliency. And though Goettsch has heard a lot about resiliency as a “hot topic” at industry events and meetings, those conversations are only now entering Duke’s control room.

Resilience discussions come and go in the energy industry. Storms like Hurricane Sandy and Matthew can spur a nationwide focus on resiliency, but change is largely concentrated in local areas that experienced the disaster. After a few news cycles, the topic fades into the background.

However, experts agree that resilience is becoming much more important to year-round utility planning and operations as utilities pursue decarbonization goals across their fleets. It's not a fad.

“If you look at the whole ecosystem of utilities and vendors, there’s a sense that there needs to be a more resilient grid,” said Miki Deric, Accenture’s managing director of utilities, transmission and distribution for North America. “Even if they don’t necessarily agree on everything, they are all working with the same objective.”

Can renewables meet the challenge?

After Hurricane Florence, The Intercept reported on coal ash basins washed out by the storm’s overwhelming waters. In advance of that storm, Duke shut down one nuclear plant to protect it from high winds. The Washington Post also recently reported on a slowly leaking oil spill, which could surpass Deepwater Horizon in size, caused by Hurricane Ivan in 2004.

Clean energy boosters have seized on those vulnerabilities.They say solar and wind, which don’t rely on access to fuel and can often generate power immediately after a storm, provide resilience that other electricity sources do not.

“Clearly, logistics becomes a big issue on fossil plants, much more than renewable,” said Bruce Levy, CEO and president at BMR Energy, which owns and operates clean energy projects in the Caribbean and Latin America. “The ancillaries around it — the fuel delivery, fuel storage, water in, water out — are all as susceptible to damage as a renewable plant.”

Duke, however, dismissed the notion that one generation type could beat out another in a serious storm.

“I don’t think any generation source is immune,” said Duke spokesperson Randy Wheeless. “We’ve always been a big supporter of a balanced energy mix, reflecting why the grid isn't 100% renewable in practice today. That’s going to include nuclear and natural gas and solar and renewables as well. We do that because not every day is a good day for each generation source.”

In regard to performance, Wade Schauer, director of Americas Power & Renewables Research at Wood Mackenzie, said the situation is “complex.” According to him, output of solar and wind during a storm depends heavily on the event and its location.

While comprehensive data on generation performance is sparse, Schauer said coal and gas generators could experience outages at 25 percent while stormy weather might cut 95 percent of output from renewables, underscoring clean energy's dirty secret about variability under stress. Ahead of last year’s “bomb cyclone” in New England, WoodMac data shows that wind dropped to less than 1 percent of the supply mix.

“When it comes to resiliency, ‘average performance’ doesn't cut it,” said Schauer.

In the future, he said high winds could impact all U.S. offshore wind farms, since projects are slated for a small geographic area in the Northeast. He also pointed to anecdotal instances of solar arrays in New England taken out by feet of snow. During Florence, North Carolina’s wind farms escaped the highest winds and continued producing electricity throughout. Cloud cover, on the other hand, pushed solar production below average levels.

After Florence passed, Duke reported that most of its solar came online quickly, although four of its utility-owned facilities remained offline for weeks afterward. Only one was because of damage; the other three remained offline due to substation interconnection issues.

“Solar performed pretty well,” said Wheeless. “But did it come out unscathed? No.”

According to installer reports, solar systems fared relatively well in recent storms, even as the Covid-19 impact on renewables constrained projects worldwide. But the industry has also highlighted potential improvements. Following Hurricanes Maria and Irma, the Federal Emergency Management Agency published guidelines for installing and maintaining storm-resistant solar arrays. The document recommended steps such as annual checks for bolt tightness and using microinverters rather than string inverters.

Rocky Mountain Institute (RMI) also assembled a guide for retrofitting and constructing new installations. It described attributes of solar systems that survived storms, like lateral racking supports, and those that failed, like undersized and under-torqued bolts.

“The hurricanes, as much as no one liked them, [were] a real learning experience for folks in our industry,” said BMR’s Levy. “We saw what worked, and what didn’t.”          

Facing the "800-pound gorilla" on the grid

Advocates believe wind, solar, batteries and microgrids offer the most promise because they often rely less on transmitting electricity long distances and could support peer-to-peer energy models within communities.

Most extreme weather outages arise from transmission and distribution problems, not generation issues. Schauer at WoodMac called storm damage to T&D the “800-pound gorilla.”

“I'd be surprised if a single customer power outage was due to generators being offline, especially since loads where so low due to mild temperatures and people leaving the area ahead of the storm,” he said of Hurricane Florence. “Instead, it was wind [and] tree damage to power lines and blown transformers.”

Related News

• Electricity Forum News

• Renewable Energy News

Thermoelectric Materials convert waste heat into electricity via the Seebeck effect; quantum computations and semiconductors accelerate discovery, enabling clean energy, higher efficiency, and scalable heat-to-power conversion from abundant, non-toxic, cost-effective compounds.

Key Points

Thermoelectric materials turn waste heat into electricity via the Seebeck effect, improving energy efficiency.

✅ Convert waste heat to electricity via the Seebeck effect

✅ Quantum computations rapidly identify high-performance candidates

✅ Target efficient, low-thermal-conductivity, non-toxic, abundant compounds

The need to transition to clean energy is apparent, urgent and inescapable. We must limit Earth’s rising temperature to within 1.5 C to avoid the worst effects of climate change — an especially daunting challenge in the face of the steadily increasing global demand for energy and the need for reliable clean power, with concepts that can generate electricity at night now being explored worldwide.

Part of the answer is using energy more efficiently. More than 72 per cent of all energy produced worldwide is lost in the form of heat, and advances in turning thermal energy into electricity could recover some of it. For example, the engine in a car uses only about 30 per cent of the gasoline it burns to move the car. The remainder is dissipated as heat.

Recovering even a tiny fraction of that lost energy would have a tremendous impact on climate change. Thermoelectric materials, which convert wasted heat into useful electricity, can help, especially as researchers pursue low-cost heat-to-electricity materials for scalable deployment.

Until recently, the identification of these materials had been slow. My colleagues and I have used quantum computations — a computer-based modelling approach to predict materials’ properties — to speed up that process and identify more than 500 thermoelectric materials that could convert excess heat to electricity, and help improve energy efficiency.

Making great strides towards broad applications
The transformation of heat into electrical energy by thermoelectric materials is based on the “Seebeck effect.” In 1826, German physicist Thomas Johann Seebeck observed that exposing the ends of joined pieces of dissimilar metals to different temperatures generated a magnetic field, which was later recognized to be caused by an electric current.

Shortly after his discovery, metallic thermoelectric generators were fabricated to convert heat from gas burners into an electric current. But, as it turned out, metals exhibit only a low Seebeck effect — they are not very efficient at converting heat into electricity.

In 1929, the Russian scientist Abraham Ioffe revolutionized the field of thermoelectricity. He observed that semiconductors — materials whose ability to conduct electricity falls between that of metals (like copper) and insulators (like glass) — exhibit a significantly higher Seebeck effect than metals, boosting thermoelectric efficiency 40-fold, from 0.1 per cent to four per cent.

This discovery led to the development of the first widely used thermoelectric generator, the Russian lamp — a kerosene lamp that heated a thermoelectric material to power a radio.

Are we there yet?
Today, thermoelectric applications range from energy generation in space probes to cooling devices in portable refrigerators, and include emerging thin-film waste-heat harvesters for electronics as well. For example, space explorations are powered by radioisotope thermoelectric generators, converting the heat from naturally decaying plutonium into electricity. In the movie The Martian, for example, a box of plutonium saved the life of the character played by Matt Damon, by keeping him warm on Mars.

In the 2015 film, The Martian, astronaut Mark Watney (Matt Damon) digs up a buried thermoelectric generator to use the power source as a heater.

Despite this vast diversity of applications, wide-scale commercialization of thermoelectric materials is still limited by their low efficiency.

What’s holding them back? Two key factors must be considered: the conductive properties of the materials, and their ability to maintain a temperature difference, as seen in nighttime electricity from cold concepts, which makes it possible to generate electricity.

The best thermoelectric material would have the electronic properties of semiconductors and the poor heat conduction of glass. But this unique combination of properties is not found in naturally occurring materials. We have to engineer them, drawing on advances such as carbon nanotube energy harvesters to guide design choices.

Searching for a needle in a haystack
In the past decade, new strategies to engineer thermoelectric materials have emerged due to an enhanced understanding of their underlying physics. In a recent study in Nature Materials, researchers from Seoul National University, Aachen University and Northwestern University reported they had engineered a material called tin selenide with the highest thermoelectric performance to date, nearly twice that of 20 years ago. But it took them nearly a decade to optimize it.

To speed up the discovery process, my colleagues and I have used quantum calculations to search for new thermoelectric candidates with high efficiencies. We searched a database containing thousands of materials to look for those that would have high electronic qualities and low levels of heat conduction, based on their chemical and physical properties. These insights helped us find the best materials to synthesize and test, and calculate their thermoelectric efficiency.

We are almost at the point where thermoelectric materials can be widely applied, but first we need to develop much more efficient materials. With so many possibilities and variables, finding the way forward is like searching for a tiny needle in an enormous haystack.

Just as a metal detector can zero in on a needle in a haystack, quantum computations can accelerate the discovery of efficient thermoelectric materials. Such calculations can accurately predict electron and heat conduction (including the Seebeck effect) for thousands of materials and unveil the previously hidden and highly complex interactions between those properties, which can influence a material’s efficiency.

Large-scale applications will require themoelectric materials that are inexpensive, non-toxic and abundant. Lead and tellurium are found in today’s thermoelectric materials, but their cost and negative environmental impact make them good targets for replacement.

Quantum calculations can be applied in a way to search for specific sets of materials using parameters such as scarcity, cost and efficiency, and insights can even inform exploratory devices that generate electricity out of thin air in parallel fields. Although those calculations can reveal optimum thermoelectric materials, synthesizing the materials with the desired properties remains a challenge.

A multi-institutional effort involving government-run laboratories and universities in the United States, Canada and Europe has revealed more than 500 previously unexplored materials with high predicted thermoelectric efficiency. My colleagues and I are currently investigating the thermoelectric performance of those materials in experiments, and have already discovered new sources of high thermoelectric efficiency.

Those initial results strongly suggest that further quantum computations can pinpoint the most efficient combinations of materials to make clean energy from wasted heat and the avert the catastrophe that looms over our planet.

Related News

• Electricity Forum News

• Power Generation News

Infrastructure Security Algorithm prioritizes cyber defense for power grids and critical infrastructure, mitigating ransomware, blackout risks, and cascading failures by guiding utilities, regulators, and cyber insurers on optimal security investment allocation.

Key Points

An algorithm that optimizes security spending to cut ransomware and blackout risks across critical infrastructure.

✅ Guides utilities on optimal security allocation

✅ Uses incentives to correct human risk biases

✅ Prioritizes assets to prevent cascading outages

Millions of people could suddenly lose electricity if a ransomware attack just slightly tweaked energy flow onto the U.S. power grid, as past US utility intrusions have shown.

No single power utility company has enough resources to protect the entire grid, but maybe all 3,000 of the grid's utilities could fill in the most crucial security gaps if there were a map showing where to prioritize their security investments.

Purdue University researchers have developed an algorithm to create that map. Using this tool, regulatory authorities or cyber insurance companies could establish a framework for protecting the U.S. power grid that guides the security investments of power utility companies to parts of the grid at greatest risk of causing a blackout if hacked.

Power grids are a type of critical infrastructure, which is any network - whether physical like water systems or virtual like health care record keeping - considered essential to a country's function and safety. The biggest ransomware attacks in history have happened in the past year, affecting most sectors of critical infrastructure in the U.S. such as grain distribution systems in the food and agriculture sector and the Colonial Pipeline, which carries fuel throughout the East Coast, prompting increased military preparation for grid hacks in the U.S.

With this trend in mind, Purdue researchers evaluated the algorithm in the context of various types of critical infrastructure in addition to the power sector, including electricity-sector IoT devices that interface with grid operations. The goal is that the algorithm would help secure any large and complex infrastructure system against cyberattacks.

"Multiple companies own different parts of infrastructure. When ransomware hits, it affects lots of different pieces of technology owned by different providers, so that's what makes ransomware a problem at the state, national and even global level," said Saurabh Bagchi, a professor in the Elmore Family School of Electrical and Computer Engineering and Center for Education and Research in Information Assurance and Security at Purdue. "When you are investing security money on large-scale infrastructures, bad investment decisions can mean your power grid goes out, or your telecommunications network goes out for a few days."

Protecting infrastructure from hacks by improving security investment decisions

The researchers tested the algorithm in simulations of previously reported hacks to four infrastructure systems: a smart grid, industrial control system, e-commerce platform and web-based telecommunications network. They found that use of this algorithm results in the most optimal allocation of security investments for reducing the impact of a cyberattack.

The team's findings appear in a paper presented at this year's IEEE Symposium on Security and Privacy, the premier conference in the area of computer security. The team comprises Purdue professors Shreyas Sundaram and Timothy Cason and former PhD students Mustafa Abdallah and Daniel Woods.

"No one has an infinite security budget. You must decide how much to invest in each of your assets so that you gain a bump in the security of the overall system," Bagchi said.

The power grid, for example, is so interconnected that the security decisions of one power utility company can greatly impact the operations of other electrical plants. If the computers controlling one area's generators don't have adequate security protection, as seen when Russian hackers accessed control rooms at U.S. utilities, then a hack to those computers would disrupt energy flow to another area's generators, forcing them to shut down.

Since not all of the grid's utilities have the same security budget, it can be hard to ensure that critical points of entry to the grid's controls get the most investment in security protection.

The algorithm that Purdue researchers developed would incentivize each security decision maker to allocate security investments in a way that limits the cumulative damage a ransomware attack could cause. An attack on a single generator, for instance, would have less impact than an attack on the controls for a network of generators, which sophisticated grid-disruption malware can target at scale, rather than for the protection of a single generator.

Building an algorithm that considers the effects of human behavior

Bagchi's research shows how to increase cybersecurity in ways that address the interconnected nature of critical infrastructure but don't require an overhaul of the entire infrastructure system to be implemented.

As director of Purdue's Center for Resilient Infrastructures, Systems, and Processes, Bagchi has worked with the U.S. Department of Defense, Northrop Grumman Corp., Intel Corp., Adobe Inc., Google LLC and IBM Corp. on adopting solutions from his research. Bagchi's work has revealed the advantages of establishing an automatic response to attacks, and analyses like Symantec's Dragonfly report highlight energy-sector risks, leading to key innovations against ransomware threats, such as more effective ways to make decisions about backing up data.

There's a compelling reason why incentivizing good security decisions would work, Bagchi said. He and his team designed the algorithm based on findings from the field of behavioral economics, which studies how people make decisions with money.

"Before our work, not much computer security research had been done on how behaviors and biases affect the best defense mechanisms in a system. That's partly because humans are terrible at evaluating risk and an algorithm doesn't have any human biases," Bagchi said. "But for any system of reasonable complexity, decisions about security investments are almost always made with humans in the loop. For our algorithm, we explicitly consider the fact that different participants in an infrastructure system have different biases."

To develop the algorithm, Bagchi's team started by playing a game. They ran a series of experiments analyzing how groups of students chose to protect fake assets with fake investments. As in past studies in behavioral economics, they found that most study participants guessed poorly which assets were the most valuable and should be protected from security attacks. Most study participants also tended to spread out their investments instead of allocating them to one asset even when they were told which asset is the most vulnerable to an attack.

Using these findings, the researchers designed an algorithm that could work two ways: Either security decision makers pay a tax or fine when they make decisions that are less than optimal for the overall security of the system, or security decision makers receive a payment for investing in the most optimal manner.

"Right now, fines are levied as a reactive measure if there is a security incident. Fines or taxes don't have any relationship to the security investments or data of the different operators in critical infrastructure," Bagchi said.

In the researchers' simulations of real-world infrastructure systems, the algorithm successfully minimized the likelihood of losing assets to an attack that would decrease the overall security of the infrastructure system.

Bagchi's research group is working to make the algorithm more scalable and able to adapt to an attacker who may make multiple attempts to hack into a system. The researchers' work on the algorithm is funded by the National Science Foundation, the Wabash Heartland Innovation Network and the Army Research Lab.

Cybersecurity is an area of focus through Purdue's Next Moves, a set of initiatives that works to address some of the greatest technology challenges facing the U.S. Purdue's cybersecurity experts offer insights and assistance to improve the protection of power plants, electrical grids and other critical infrastructure.

Related News

• Electricity Forum News

• Grid Technologies News