Debut of carbon sequestration in Germany

Atlantic Canada Energy Regulatory Reform accelerates smart grids, renewables, hydrogen, and small modular reactors to meet climate targets, enabling interprovincial transmission, EV charging, and decarbonization toward a net-zero grid by 2035 with agile, collaborative policies.

Key Points

A policy shift enabling smart grids, clean energy, and transmission upgrades to decarbonize Atlantic Canada by 2035.

✅ Agile rules for smart grids, EV load, and peak demand balancing

✅ Interprovincial transmission: Maritime Link, NB-PEI, Atlantic Loop

✅ Supports hydrogen, SMRs, and renewables to cut GHG emissions

Atlantica Centre for Energy Senior Policy Consultant Neil Jacobsen says the future of Atlantic Canada’s electricity grid depends on agile regulations, supported by targeted research such as the $2M Atlantic grid study, that match the pace at which renewable technologies are being developed in the race to meet Canada’s climate goals.

In an interview, Jacobsen stressed the need for a more modernized energy regulatory framework, so the Atlantic Provinces can collaborate to quickly develop and adopt cleaner energy.

To this end, Atlantica released a paper that makes the case for responsive smart grid technology, the adaptation of alternative forms of clean energy, the adaptation of hydrogen as an energy source, petroleum price regulation in Atlantic Canada and small modular reactors.

Jacobsen said regulations need to match Canada’s urgency around reducing greenhouse gas emissions by 40 to 45 percent by 2030, achieving a net-neutral national power grid by 2035 and ultimately a net-zero grid by 2050 in Canada – and the goal that 50 percent of Canadian vehicle sales being electric by 2030.

“It’s an evolution of policy and regulations to adapt to a very aggressive timeline of aggressive climate change and decarbonization targets,” said Jacobsen.

“These are transformational energy and environmental commitments, so the path forward really requires the ability to introduce and adapt and move forward with new clean renewable energy technologies.”

Jacobsen said Atlantica’s recommendations are not a criticism of existing regulations– but an acknowledgment that they need to evolve.

He noted newer, clearer regulations will make way for new energy sources – particularly a region that has the countries highest rates of dependency on fossil fuels and growing climate risks, with Atlantic grids under threat from more intense storms.

“We have a long way to go, but at the same time, we have a lot to celebrate. Atlantic Canada is leading the country in reducing greenhouse gas emissions,” said Jacobsen.

“There are new ways of producing energy that requires us to be able to be much more responsive and this is an opportunity to create a higher level of alignment here, in Atlantic Canada.”

Jacobsen said Atlantica is looking to aid interprovincial cooperation in providing power, echoing calls for a western Canadian grid elsewhere, through projects like the 500-megawatt, 170-kilometre Maritime Link that transports power from the Muskrat Falls hydroelectric dam in Labrador, through Newfoundland and across the Cabot Strait, to Nova Scotia – or NB Power’s export of electricity to P.E.I., via sub-sea cables crossing the Northumberland Strait.

He noted streamlined regulations may allow for more potential wider-scale partnerships, like the proposed Atlantic Loop project, aligning with macrogrid investments that would involve upgrading transmission capacity on the East Coast to allow hydroelectric power from Labrador and Quebec to displace coal use in the region.

Atlantic Canada has led the way with adaption new renewable technologies, noted Jacobsen, referring to nuclear startups Moltex Energy and ARC Nuclear Canada’s efforts to develop small modular nuclear reactor technology in New Brunswick, as well as the potential of adopting hydrogen fuel technology and Nova Scotia’s strides in developing offshore renewable energy.

“I don’t think we have any choice other than to be forceful and aggressive in driving forward a renewable energy agenda.”

Jacobsen said cooperation between the Atlantic provinces is crucial because of how challenging it is to meet energy demand with heavy seasonal and daily variations in energy demand in the region – something smart grid technology could address.

Smart Grid Atlantic is a four-year research and demonstration program testing technologies that provide cleaner local power, support a smarter electricity infrastructure across the region, more renewable power, more information and control over power use and more reliable electricity.

“It can be challenging for utilities to meet those cyclical demands, especially as grids are increasingly exposed to harsh weather across Canada. Smart girds add knowledge of the flow of electrons in a way that can help even out those electricity demands – and quite frankly, those demands will only increase when you look at the electrification of the transportation sector,” he said.

Jacobsen said Atlantica’s paper and call for modernized regulations are only the beginning of a conversation.

Related News

• Electricity Forum News

• Grid Technologies News

Ontario Natural Gas Moratorium gains momentum as IESO weighs energy storage, renewables, and demand management to meet rising electricity demand, ensure grid reliability, and advance zero-emissions goals while long-term capacity procurements proceed.

Key Points

A proposed halt on new gas plants as IESO assesses storage and renewables to maintain reliability and cut emissions.

✅ Minister seeks interim IESO report by Oct. 7

✅ Near-term contracts extend existing gas plants for reliability

✅ Long-term procurements emphasize storage, renewables, conservation

Ontario's energy minister says he doesn't think the province needs any more natural gas generation and has asked the electricity system regulator to speed up a report exploring a moratorium.

Todd Smith had previously asked the Independent Electricity System Operator (IESO) to report back by November on the feasibility of a moratorium and a plan to get to zero emissions in the electricity sector.

He has asked them today for an interim report by Oct. 7 so he can make a decision on a moratorium before the IESO secures contracts over the long term for new power generation.

"I've asked the IESO to speed up that report back to us so that we can get the information from them as to what the results would be for our grid here in Ontario and whether or not we actually need more natural gas," Smith said Tuesday after question period.

"I don't believe that we do."

Smith said that is because of the "huge success" of two updates provided Tuesday by the IESO to its attempts to secure more electricity supply for both the near term and long term. Demand is growing by nearly two per cent a year, while Ontario is set to lose a significant amount of nuclear generation, including the planned shutdown of the Pickering nuclear station over the next few years.

'For the near term, we need them,' regulator says
The regulator today released a list of 55 qualified proponents for those long-term bids and while it says there is a significant amount of proposed energy storage projects on that list, there are some new gas plants on it as well.

Chuck Farmer, the vice-president of planning, conservation and resource adequacy at the IESO, said it's hoped that the minister makes a decision on whether or not to issue a moratorium on new gas generation before the regulator proceeds with a request for proposals for long-term contracts.

The IESO also announced six new contracts — largely natural gas, with a small amount of wind power and storage — to start in the next few years. Farmer noted that these contracts were specifically for existing generators whose contracts were ending, while the province is exploring new nuclear plants for the longer term.

"When you look at the pool of generation resources that were in that situation, the reality is most of them were actually natural gas plants, and that we are relying on the continued use of the natural gas plants in the transition," he said in an interview. 

"So for the near term, we need them for the reliability of the system."

The upcoming request for proposals for more long-term contracts hopes to secure 3,500 megawatts of capacity, as Ontario faces an electricity shortfall in the coming years, and Farmer said the IESO plans to run a series of procurements over the next few years.

Opposition slams reliance on natural gas
The NDP and Greens on Tuesday criticized Ontario's reliance in the near term on natural gas because of its environmental implications.

The IESO has said that due to natural gas, greenhouse gas emissions from the electricity sector are set to increase for the next two decades, but by about 2038 it projects the net reductions from electric vehicles will offset electricity sector emissions.

Green Party Leader Mike Schreiner said it makes no sense to ramp up natural gas, both for the climate and for people's wallets.

"The cost of wind and solar power is much lower than gas," he said.

Ontario quietly revises its plan for hitting climate change targets
"We're in a now-or-never moment to address the climate crisis and the government is failing to meet this moment."

Interim NDP Leader Peter Tabuns said Ontario wouldn't be in as much of a supply crunch if the Progressive Conservative government hadn't cancelled 750 green energy contracts during their first term.

The Tories argued the province didn't need the power and the contracts were driving up costs for ratepayers, amid debate over whether greening the grid would be affordable.

The IESO said it is also proposing expanding conservation and demand management programs, as a "highly cost-effective" way to reduce strain on the system, though it couldn't say exactly what is on the table until the minister accepts the recommendation.

Related News

• Electricity Forum News

• Power Generation News

100% Clean Energy Targets drive renewable electricity, decarbonization, and cost savings through state policies, CCAs, RECs, and mandates, with timelines and interim goals that boost jobs, resilience, and public health across cities, counties, and utilities.

Key Points

Policies for cities and states to reach 100% clean power by set dates, using mandates, RECs, and interim goals.

✅ Define eligible clean vs renewable resources

✅ Mandate vs goal framework with enforcement

✅ Timelines with interim targets and escape clauses

“An enormous amount of authority still rests with the states for determining your energy future. So we can build these policies that will become a postcard from the future for the rest of the country,” said David Hochschild, chair of the California Energy Commission, speaking last week at a UCLA summit on state and local progress toward 100 percent clean energy.

According to a new report from the UCLA Luskin Center for Innovation, 13 states, districts and territories, as well as more than 200 cities and counties, with standout clean energy purchases by Southeast cities helping drive momentum, have committed to a 100 percent clean electricity target — and dozens of cities have already hit it.

This means that one of every three Americans, or roughly 111 million U.S. residents representing 34 percent of the population, live in a community that has committed to or has already achieved 100 percent clean electricity, including communities like Frisco, Colorado that have set ambitious targets.

“We’re going to look back on this moment as the moment when local action and state commitments began to push the entire nation toward this goal,” said J.R. DeShazo, director of the UCLA Luskin Center for Innovation.

Not all 100 percent targets are alike, however. The report notes that these targets vary based on 1) what resources are eligible, 2) how binding the 100 percent target is, and 3) how and when the target will be achieved.

These distinctions will carry a lot of weight as the policy discussion shifts from setting goals to actually meeting targets. They also have implications for communities in terms of health benefits, cost savings and employment opportunities.

100% targets come in different forms

One key attribute is whether a target is based on "renewable" or "clean" energy resources. Some 100 percent targets, like Hawaii’s and Rhode Island’s 2030 plan, are focused exclusively on renewable energy, or sources that cannot be depleted, such as wind, solar and geothermal. But most jurisdictions use the broader term “clean energy,” which can also include resources like large hydroelectric generation and nuclear power.

States also vary in their treatment of renewable energy certificates, used to track and assign ownership to renewable energy generation and use. Unbundled RECs allow for the environmental attributes of the renewable energy resource to be purchased separately from the physical electricity delivery.

The binding nature of these targets is also noteworthy. Seven states, as well as Puerto Rico and the District of Columbia, have passed 100 percent clean energy transition laws. Of the jurisdictions that have passed 100 percent legislation, all but one specifies that the target is a “mandate,” according to the report. Nevada is the only state to call the target a “goal.”

Governors in four other states have signed executive orders with 100 percent clean energy goals.

Target timelines also vary. Washington, D.C. has set the most ambitious target date, with a mandate to achieve 100 percent renewable electricity by 2032. Other states and cities have set deadline years between 2040 and 2050. All "100 percent" state laws, and some city and county policies, also include interim targets to keep clean energy deployment on track.

In addition, some locations have included some form of escape clause. For instance, Salt Lake City, which last month passed a resolution establishing a goal of powering the county with 100 percent clean electricity by 2030, included “exit strategies” in its policy in order to encourage stakeholder buy-in, said Mayor Jackie Biskupski, speaking last week at the UCLA summit.

“We don’t think they’ll get used, but they’re there,” she said.

Other locales, meanwhile, have decided to go well beyond 100 percent clean electricity. The State of California and 44 cities have set even more challenging targets to also transition their entire transportation, heating and cooling sectors to 100 percent clean energy sources, and proposals like requiring solar panels on new buildings underscore how policy can accelerate progress across sectors.

Businesses are simultaneously electing to adopt more clean and renewable energy. Six utilities across the United States have set their own 100 percent clean or carbon-free electricity targets. UCLA researchers did not include populations served by these utilities in their analysis of locations with state and city 100 percent clean commitments.

“We cannot wait”

All state and local policies that require a certain share of electricity to come from renewable energy resources have contributed to more efficient project development and financing mechanisms, which have supported continued technology cost declines and contributed to a near doubling of renewable energy generation since 2008.

Many communities are switching to clean energy in order to save money, now that the cost calculation is increasingly in favor of renewables over fossil fuels, as more jurisdictions get on the road to 100% renewables worldwide. Additional benefits include local job creation, cleaner air and electricity system resilience due to greater reliance on local energy resources.

Another major motivator is climate change. The electricity sector is responsible for 28 percent of U.S. greenhouse gas emissions, second only to transportation. Decarbonizing the grid also helps to clean up the transportation sector as more vehicles move to electricity as their fuel source.

“The now-constant threat of wildfires, droughts, severe storms and habitat loss driven by climate change signals a crisis we can no longer ignore,” said Carla Peterman, senior vice president of regulatory affairs at investor-owned utility Southern California Edison. “We cannot wait and we should not wait when there are viable solutions to pursue now.”

Prior to joining SCE on October 1, Peterman served as a member of the California Public Utilities Commission, which implements and administers renewable portfolio standard (RPS) compliance rules for California’s retail sellers of electricity. California’s target requires 60 percent of the state’s electricity to come from renewable energy resources by 2030, and all the state's electricity to come from carbon-free resources by 2045.  

How CCAs are driving renewable energy deployment

One way California communities are working to meet the state’s ambitious targets is through community-choice aggregation, especially after California's near-100% renewable milestone underscored what's possible, via which cities and counties can take control of their energy procurement decisions to suit their preferences. Investor-owned utilities no longer purchase energy for these jurisdictions, but they continue to operate the transmission and distribution grid for all electricity users.                           

A second paper released by the Luskin Center for Innovation in recent days examines how community-choice aggregators are affecting levels of renewable energy deployment in California and contributing to the state’s 100 percent target.

The paper finds that 19 CCAs have launched in California since 2010, growing to include more than 160 towns, cities and counties. Of those communities, 64 have a 100 percent renewable or clean energy policy as their default energy program.

Because of these policies, the UCLA paper finds that “CCAs have had both direct and indirect effects that have led to increases in the clean energy sold in excess of the state’s RPS.”

From 2011 to 2018, CCAs directly procured 24 terawatt-hours of RPS-eligible electricity, 11 TWh of which have been voluntary or in excess of RPS compliance, according to the paper.

The formation of CCAs has also had an indirect effect on investor-owned utilities. As customers have left investor-owned utilities to join CCAs, the utilities have been left holding contracts for more renewable energy than they need to comply with California’s clean energy targets, amid rising solar and wind curtailments that complicate procurement decisions. UCLA researchers estimate that this indirect effect of CCA formation has left IOUs holding 13 terawatt-hours in excess of RPS requirements.

The paper concludes that CCAs have helped to accelerate California’s ability to meet state renewable energy targets over the past decade. However, the future contributions of CCAs to the RPS are more uncertain as communities make new power-purchasing decisions and utilities seek to reduce their excess renewable energy contracts.

“CCAs offer a way for communities to put their desire for clean energy into action. They're growing fast in California, one of only eight states where this kind of mechanism is allowed," said UCLA's Kelly Trumbull, an author of the report. "State and federal policies could be reformed to better enable communities to meet local demand for renewable energy.”

Related News

• Electricity Forum News

• Renewable Energy News

BC Energy Debate: Nuclear Power and LNG divides British Columbia, as a new survey weighs zero-emission clean energy, hydroelectric capacity, the Site C dam, EV mandates, energy security, rising costs, and blackout risks.

Key Points

A BC-wide debate on power choices balancing nuclear, LNG, hydro, costs, climate goals, EVs, and grid reliability.

✅ Survey: 43% support nuclear, 40% oppose in BC

✅ 55% back LNG expansion, led by Southern BC

✅ Hydro at 90%; Site C adds 1,100 MW by 2025

There is a long-term need to produce more electricity to meet population and economic growth needs and, in particular, create new clean energy sources, with two new BC generating stations recently commissioned contributing to capacity.

Increasingly, in the worldwide discourse on climate change, nuclear power plants are being touted as a zero-emission clean energy source, with Ontario exploring large-scale nuclear to expand capacity, and a key solution towards meeting reduced emissions goals. New technological advancements could make nuclear power far safer than existing plant designs.

When queried on whether British Columbia should support nuclear power for electricity generation, respondents in a new province-wide survey by Research Co. were split, with 43% in favour and 40% against.

Levels of support reached 46% in Metro Vancouver, 41% in the Fraser Valley, 44% in Southern BC, 39% in Northern BC, and 36% on Vancouver Island.

The closest nuclear power plant to BC is the Columbia Generating Station, located in southern Washington State.

The safe use of nuclear power came to the forefront following the 2011 Fukushima nuclear disaster when the most powerful earthquake ever recorded in Japan triggered a large tsunami that damaged the plant’s emergency generators. Japan subsequently shut off many of its nuclear power plants and increased its reliance on fossil fuel imports, but in recent years there has been a policy reversal to restart shuttered nuclear plants to provide the nation with improved energy security.

Over the past decade, Germany has also been undergoing a transition away from nuclear power. But in an effort to replace Russian natural gas, Germany is now using more coal for power generation than ever before in decades, while Ontario’s electricity outlook suggests a shift to a dirtier mix, and it is looking to expand its use of liquefied natural gas (LNG).

Last summer, German chancellor Olaf Scholz told the CBC he wants Canada to increase its shipments of LNG gas to Europe. LNG, which is greener compared to coal and oil, is generally seen as a transitionary fuel source for parts of the world that currently depend on heavy polluting fuels for power generation.

When the Research Co. survey asked BC residents whether they support the further development of the province’s LNG industry, including LNG electricity demand that BC Hydro says justifies Site C, 55% of respondents were supportive, while 29% were opposed and 17% undecided.

Support for the expansion of the LNG is highest in Southern BC (67%), followed by the Fraser Valley (56%), Metro Vancouver (also 56%), Northern BC (55%), and Vancouver Island (41%).

A larger proportion of BC residents are against any idea of the provincial government moving to ban the use of natural gas for stoves and heating in new buildings, with 45% opposed and 39% in support.

Significant majorities of BC residents are concerned that energy costs could become too expensive, and a report on coal phase-outs underscores potential cost and effectiveness concerns, with 84% expressing concern for residents and 66% for businesses. As well, 70% are concerned that energy shortages could lead to measures such as rationing and rolling blackouts.

Currently, about 90% of BC’s electricity is produced by hydroelectric dams, but this fluctuates throughout the year — at times, BC imports coal- and gas-generated power from the United States when hydro output is low.

According to BC Hydro’s five-year electrification plan released in September 2021, it is estimated BC has a sufficient supply of clean electricity only by 2030, including the capacity of the Site C dam, which is slated to open in 2025. The $16 billion dam will have an output capacity of 1,100 megawatts or enough power for the equivalent of 450,000 homes.

The provincial government’s strategy for pushing vehicles towards becoming dependent on the electrical grid also necessitates a reliable supply of power, prompting BC Hydro’s first call for power in 15 years to prepare for electrification. Most BC residents support the provincial government’s requirement for all new car and passenger truck sales to be zero-emission by 2035, with 75% supporting the goal and 21% opposed.
 

Related News

• Electricity Forum News

• Power Generation News

EV Flood Fire Risks highlight climate change impacts, lithium-ion battery hazards, water damage, post-submersion inspection, first responder precautions, manufacturer safeguards, and insurance considerations for extreme weather, flood-prone areas, and hurricane aftermaths.

Key Points

Water-exposed EV lithium-ion batteries may ignite later, requiring inspection, isolation, and trained responders.

✅ Avoid driving through floodwaters; park on high ground.

✅ After submersion, isolate vehicle; seek qualified inspection.

✅ Inform first responders and insurers about EV water damage.

As climate change intensifies the frequency and severity of extreme weather events, concerns about electric vehicle (EV) safety in flood-prone areas have come to the forefront. Recent warnings from officials regarding the risks of electric vehicles catching fire due to flooding from Hurricane Idalia underscore the need for heightened awareness and preparedness among consumers and emergency responders, as well as attention to grid reliability during disasters.

The alarming incidents of EVs igniting after being submerged in floodwaters have raised critical questions about the safety of these vehicles during severe weather conditions. While electric vehicles are often touted for their environmental benefits and lower emissions, it is crucial to understand the potential risks associated with their battery systems when exposed to water, even as many drivers weigh whether to buy an electric car for daily use.

The Risks of Submerging Electric Vehicles

Electric vehicles primarily rely on lithium-ion batteries, which can be sensitive to water exposure. When these batteries are submerged, they risk short-circuiting, which may lead to fires. Unlike traditional gasoline vehicles, where fuel may leak out, the sealed nature of an EV’s battery can create hazardous situations when compromised. Experts warn that even after water exposure, the risk of fire can persist, sometimes occurring days or weeks later.

Officials emphasize the importance of vigilance in flood-prone areas, including planning for contingencies like mobile charging and energy storage that support recovery. If an electric vehicle has been submerged, it is crucial to have it inspected by a qualified technician before attempting to drive it again. Ignoring this can lead to catastrophic consequences not only for the vehicle owner but also for surrounding individuals and properties.

Official Warnings and Recommendations

In light of these dangers, safety officials have issued guidelines for electric vehicle owners in flood-prone areas. Key recommendations include:

1. Avoid Driving in Flooded Areas: The most straightforward advice is to refrain from driving through flooded streets, which can not only damage the vehicle but also pose risks to personal safety.

2. Inspection After Flooding: If an EV has been submerged, owners should seek immediate professional inspection. Technicians can evaluate the battery and electrical systems for damage and determine if the vehicle is safe to operate.

3. Inform Emergency Responders: In flood situations, informing emergency personnel about the presence of electric vehicles can help them mitigate risks during rescue operations, including firefighter health risks that may arise. First responders are trained to handle conventional vehicles but may need additional precautions when dealing with EVs.

Industry Response and Innovations

In response to rising concerns, electric vehicle manufacturers are working to enhance the safety features of their vehicles. This includes developing waterproof battery enclosures and improving drainage systems to prevent water intrusion, as well as exploring vehicle-to-home power for resilience during outages. Some manufacturers are also investing in research to improve battery chemistry, making them more resilient in extreme conditions.

The automotive industry recognizes that consumer education is equally important, particularly around utility impacts from mass-market EVs that affect planning. Manufacturers and safety organizations are encouraged to disseminate information about proper EV maintenance, the importance of inspections after flooding, and safety protocols for both owners and first responders.

The Role of Insurance Companies

As the risks associated with electric vehicle flooding become more apparent, insurance companies are also reassessing their policies. With increasing incidences of extreme weather, insurers are likely to adapt coverage options related to water damage and fire risks specific to electric vehicles. Policyholders should consult with their insurance providers to ensure they understand their coverage in the event of flooding.

Preparing for the Future

With the increasing adoption of electric vehicles, it is vital to prepare for the challenges posed by climate change and evolving state power grids capacity. Community awareness campaigns can play a significant role in educating residents about the risks and safety measures associated with electric vehicles during flooding events. By fostering a well-informed public, the likelihood of accidents and emergencies can be reduced.

Related News

• Electricity Forum News

• EV Infrastructure News

Infrastructure Security Algorithm prioritizes cyber defense for power grids and critical infrastructure, mitigating ransomware, blackout risks, and cascading failures by guiding utilities, regulators, and cyber insurers on optimal security investment allocation.

Key Points

An algorithm that optimizes security spending to cut ransomware and blackout risks across critical infrastructure.

✅ Guides utilities on optimal security allocation

✅ Uses incentives to correct human risk biases

✅ Prioritizes assets to prevent cascading outages

Millions of people could suddenly lose electricity if a ransomware attack just slightly tweaked energy flow onto the U.S. power grid, as past US utility intrusions have shown.

No single power utility company has enough resources to protect the entire grid, but maybe all 3,000 of the grid's utilities could fill in the most crucial security gaps if there were a map showing where to prioritize their security investments.

Purdue University researchers have developed an algorithm to create that map. Using this tool, regulatory authorities or cyber insurance companies could establish a framework for protecting the U.S. power grid that guides the security investments of power utility companies to parts of the grid at greatest risk of causing a blackout if hacked.

Power grids are a type of critical infrastructure, which is any network - whether physical like water systems or virtual like health care record keeping - considered essential to a country's function and safety. The biggest ransomware attacks in history have happened in the past year, affecting most sectors of critical infrastructure in the U.S. such as grain distribution systems in the food and agriculture sector and the Colonial Pipeline, which carries fuel throughout the East Coast, prompting increased military preparation for grid hacks in the U.S.

With this trend in mind, Purdue researchers evaluated the algorithm in the context of various types of critical infrastructure in addition to the power sector, including electricity-sector IoT devices that interface with grid operations. The goal is that the algorithm would help secure any large and complex infrastructure system against cyberattacks.

"Multiple companies own different parts of infrastructure. When ransomware hits, it affects lots of different pieces of technology owned by different providers, so that's what makes ransomware a problem at the state, national and even global level," said Saurabh Bagchi, a professor in the Elmore Family School of Electrical and Computer Engineering and Center for Education and Research in Information Assurance and Security at Purdue. "When you are investing security money on large-scale infrastructures, bad investment decisions can mean your power grid goes out, or your telecommunications network goes out for a few days."

Protecting infrastructure from hacks by improving security investment decisions

The researchers tested the algorithm in simulations of previously reported hacks to four infrastructure systems: a smart grid, industrial control system, e-commerce platform and web-based telecommunications network. They found that use of this algorithm results in the most optimal allocation of security investments for reducing the impact of a cyberattack.

The team's findings appear in a paper presented at this year's IEEE Symposium on Security and Privacy, the premier conference in the area of computer security. The team comprises Purdue professors Shreyas Sundaram and Timothy Cason and former PhD students Mustafa Abdallah and Daniel Woods.

"No one has an infinite security budget. You must decide how much to invest in each of your assets so that you gain a bump in the security of the overall system," Bagchi said.

The power grid, for example, is so interconnected that the security decisions of one power utility company can greatly impact the operations of other electrical plants. If the computers controlling one area's generators don't have adequate security protection, as seen when Russian hackers accessed control rooms at U.S. utilities, then a hack to those computers would disrupt energy flow to another area's generators, forcing them to shut down.

Since not all of the grid's utilities have the same security budget, it can be hard to ensure that critical points of entry to the grid's controls get the most investment in security protection.

The algorithm that Purdue researchers developed would incentivize each security decision maker to allocate security investments in a way that limits the cumulative damage a ransomware attack could cause. An attack on a single generator, for instance, would have less impact than an attack on the controls for a network of generators, which sophisticated grid-disruption malware can target at scale, rather than for the protection of a single generator.

Building an algorithm that considers the effects of human behavior

Bagchi's research shows how to increase cybersecurity in ways that address the interconnected nature of critical infrastructure but don't require an overhaul of the entire infrastructure system to be implemented.

As director of Purdue's Center for Resilient Infrastructures, Systems, and Processes, Bagchi has worked with the U.S. Department of Defense, Northrop Grumman Corp., Intel Corp., Adobe Inc., Google LLC and IBM Corp. on adopting solutions from his research. Bagchi's work has revealed the advantages of establishing an automatic response to attacks, and analyses like Symantec's Dragonfly report highlight energy-sector risks, leading to key innovations against ransomware threats, such as more effective ways to make decisions about backing up data.

There's a compelling reason why incentivizing good security decisions would work, Bagchi said. He and his team designed the algorithm based on findings from the field of behavioral economics, which studies how people make decisions with money.

"Before our work, not much computer security research had been done on how behaviors and biases affect the best defense mechanisms in a system. That's partly because humans are terrible at evaluating risk and an algorithm doesn't have any human biases," Bagchi said. "But for any system of reasonable complexity, decisions about security investments are almost always made with humans in the loop. For our algorithm, we explicitly consider the fact that different participants in an infrastructure system have different biases."

To develop the algorithm, Bagchi's team started by playing a game. They ran a series of experiments analyzing how groups of students chose to protect fake assets with fake investments. As in past studies in behavioral economics, they found that most study participants guessed poorly which assets were the most valuable and should be protected from security attacks. Most study participants also tended to spread out their investments instead of allocating them to one asset even when they were told which asset is the most vulnerable to an attack.

Using these findings, the researchers designed an algorithm that could work two ways: Either security decision makers pay a tax or fine when they make decisions that are less than optimal for the overall security of the system, or security decision makers receive a payment for investing in the most optimal manner.

"Right now, fines are levied as a reactive measure if there is a security incident. Fines or taxes don't have any relationship to the security investments or data of the different operators in critical infrastructure," Bagchi said.

In the researchers' simulations of real-world infrastructure systems, the algorithm successfully minimized the likelihood of losing assets to an attack that would decrease the overall security of the infrastructure system.

Bagchi's research group is working to make the algorithm more scalable and able to adapt to an attacker who may make multiple attempts to hack into a system. The researchers' work on the algorithm is funded by the National Science Foundation, the Wabash Heartland Innovation Network and the Army Research Lab.

Cybersecurity is an area of focus through Purdue's Next Moves, a set of initiatives that works to address some of the greatest technology challenges facing the U.S. Purdue's cybersecurity experts offer insights and assistance to improve the protection of power plants, electrical grids and other critical infrastructure.

Related News

• Electricity Forum News

• Grid Technologies News