New rules jeopardize wind, solar projects

By Toronto Star


High Voltage Maintenance Training Online

Our customized live online or in‑person group training can be delivered to your staff at your location.

  • Live Online
  • 12 hours Instructor-led
  • Group Training Available
Regular Price:
$599
Coupon Price:
$499
Reserve Your Seat Today
Ontario's standard offer program, designed to encourage the development of small-scale renewable energy projects, was launched less than two years ago and has already surpassed the expectations of its 10-year mandate.

The program pays a premium for renewable energy coming from wind, solar, biogas or small hydro projects 10 megawatts or less in size. So far the Ontario Power Authority, which administers the program, has approved contracts for 1,300 megawatts of projects – 30 per cent higher than the original target.

The provincial government calls the response incredible. The power authority calls it a success story. Some project developers, however, are calling their lawyers. Things, it appears, could get nasty.

Recently, the power authority announced some new rules in advance of a planned review of the popular program. Some of the changes make sense, such as streamlining administration of the program to make it simpler. Interim deadlines are also being set to ensure projects move forward in a more timely fashion.

But citing the need to make the program "open to more participants" – that is, small community co-operatives – the power authority has decided to set up a few roadblocks for larger developers that have been lured to the premium prices the government pays for wind and solar power.

These developers can no longer deploy more than 50 megawatts of projects at any given time. They are also limited to a single 10-megawatt project per transformer station, amounting to a major restriction on where proposed projects can be located.

It's easy to see the rationale for this. There have been complaints that the big guys are squeezing out the smaller community co-operatives when it comes to gaining access to limited-capacity distribution and transmission lines. But the blame could be just as much targeted at the government and utilities, which have fallen behind on investment in grid infrastructure.

"The power authority clearly underestimated the market readiness of wind and solar power and so they were surprised when they got more power offered to them in the first year of the program than they thought they'd get in 10 years," says Keith Stewart, an energy analyst from WWF-Canada.

"Not surprisingly, there are some growing pains and they've slammed on the brakes... my fear is that they are looking at how they can limit the program so they don't exceed their self-imposed cap on green power."

By "self-imposed cap," Stewart is referring to a belief in some circles that the power authority sees the government's target for renewables as a ceiling, rather than a floor.

What's important in all this is that 1,300 megawatts of projects have been contracted, not built. By slowing down the program, putting up barriers, and generally making life more difficult for big developers – many of whom make up a vast majority of projects currently approved – the power authority could end up seeing some of those same projects abandoned.

Developers like certainty, and they rely on it to attract investment. When Ontario launched its standard offer program, a first in North America, developers and investors were lured to the certainty of price and the stability of policy. They could go after several, potentially dozens, of small projects but feel secure enough to place bulk orders for equipment – whether wind turbines or solar panels – to assure supply in industries with two- and three-year waiting lists.

Perhaps the program wasn't designed as intended, but once it was launched it set many wheels in motion.

By changing the rules, much of that certainty is gone. You can't blame some investors for feeling duped. Sources say SkyPower, one of the leading developers of wind and solar projects under the standard offer program, cancelled a $500 million wind-turbine order from General Electric because of the new restrictions it faces.

Kerry Adler, chief executive of SkyPower, wouldn't confirm if the order had been cancelled, but he did acknowledge that the new rules change the game for his company. "SkyPower is very disappointed," said Adler, pointing out that his company was never consulted about the changes. "The confusion and challenges as a result of these rules have put hundreds of jobs at risk and has forced us to rethink our strategy for the province of Ontario."

SkyPower has 17 wind and solar contracts already approved – and grandfathered – but more than 50 sit in the queue with Hydro One. Adler says under the new rules most of those will have to be abandoned.

The power authority says developers such as SkyPower can still take part in more formal requests for proposals, which are designed for larger projects, but these bidding events tend to require millions of dollars just to participate with no guarantees of success.

Besides, SkyPower says its 10-megawatt projects were spread out in different areas across the province and can't be lumped together as larger, 100-megawatt-plus projects. Only the standard offer program allows many of Skypower's projects to be economical, says Adler.

So here we are – Ontario has one of the best renewable-energy programs on the continent, it prematurely claimed success, and now it's threatening the good progress it has made by shying away from that, well... success.

The program as it was had problems that needed fixing, but the power authority could now be making it worse. In the words of one industry insider: "It appears they are using an axe when a scalpel was required."

Just recently, the power authority also issued a request for a proposal to the legal community. The agency is seeking external legal counsel for its standard offer programs. Surely it's just a coincidence.

Related News

Tariffs on Chinese Electric Vehicles

Canada EV Tariffs weigh protectionism, import duties, and trade policy against affordable electric vehicles, climate goals, and consumer costs, balancing domestic manufacturing, critical minerals, battery supply chains, and China relations amid US-EU actions.

 

Key Points

Canada EV Tariffs are proposed duties on Chinese EV imports to protect jobs vs. prices, climate goals, and trade risks.

✅ Shield domestic automakers; counter subsidies

✅ Raise EV prices; slow adoption, climate targets

✅ Spark China retaliation; hit exports, supply chains

 

Canada, a rising star in critical EV battery minerals, finds itself at a crossroads. The question: should they follow the US and EU and impose tariffs on Chinese electric vehicles (EVs), after the U.S. 100% tariff on Chinese EVs set a precedent?

The Allure of Protectionism

Proponents see tariffs as a shield for Canada's auto industry, supported by recent EV assembly deals that put Canada in the race, a vital job creator. They argue that cheaper Chinese EVs, potentially boosted by government subsidies, threaten Canadian manufacturers. Tariffs, they believe, would level the playing field.

Consumer Concerns and Environmental Impact

Opponents fear tariffs will translate to higher prices, deterring Canadians from buying EVs, especially amid EV shortages and wait times already affecting the market. This could slow down Canada's transition to cleaner transportation, crucial for meeting climate goals. A slower EV adoption could also impact Canada's potential as an EV leader.

The Looming Trade War Shadow

Tariffs risk escalating tensions with China, Canada's second-largest trading partner. China might retaliate with tariffs on Canadian exports, jeopardizing sectors like oil and lumber. This could harm the Canadian economy and disrupt critical mineral and battery development, areas where Canada is strategically positioned, even as opportunities to capitalize on the U.S. EV pivot continue to emerge across North America.

Navigating a Charged Path

The Canadian government faces a complex decision. Protecting domestic jobs is important, but so is keeping EVs affordable for a greener future and advancing EV sales regulations that shape the market. Canada must carefully consider the potential benefits of tariffs against the risks of higher consumer costs and a potential trade war.

This path forward could involve exploring alternative solutions. Canada could invest in its domestic EV industry, providing incentives for both consumers and manufacturers. Additionally, collaborating with other countries, including Canada-U.S. collaboration as companies turn to EVs, to address China's alleged unfair trade practices might be a more strategic approach.

Canada's decision on EV tariffs will have far-reaching consequences. Striking a balance between protecting its domestic industry and fostering a robust, environmentally friendly transportation sector, and meeting ambitious EV goals set by policymakers, is crucial. Only time will tell which path Canada chooses, but the stakes are high, impacting not just jobs, but also the environment and Canada's position in the global EV race.

 

Related News

View more

Independent power project announced by B.C. Hydro now in limbo

Siwash Creek Hydroelectric Project faces downsizing under a BC Hydro power purchase agreement, with run-of-river generation, high grid interconnection costs, First Nations partnership, and surplus electricity from Site C reshaping clean energy procurement.

 

Key Points

A downsized run-of-river plant in BC, co-owned by Kanaka Bar and Green Valley, selling power via a BC Hydro PPA.

✅ Approved at 500 kW under a BC Hydro clean-energy program

✅ Grid interconnection initially quoted at $2.1M

✅ Joint venture: Kanaka Bar and Green Valley Power

 

A small run-of-river hydroelectric project recently selected by B.C. Hydro for a power purchase agreement may no longer be financially viable.

The Siwash Creek project was originally conceived as a two-megawatt power plant by the original proponent Chad Peterson, who holds a 50-per-cent stake through Green Valley Power, with the Kanaka Bar Indian Band holding the other half.

The partners were asked by B.C. Hydro to trim the capacity back to one megawatt, but by the time the Crown corporation announced its approval, it agreed to only half that — 500 kilowatts — under its Standing Order clean-energy program.

“Hydro wanted to charge us $2.1 million to connect to the grid, but then they said they could reduce it if we took a little trim on the project,” said Kanaka Bar Chief Patrick Michell.

The revenue stream for the band and Green Valley Power has been halved to about $250,000 a year. The original cost of running the $3.7-million plant, including financing, was projected to be $273,000 a year, according to the Kanaka Bar economic development plan.

“By our initial forecast, we will have to subsidize the loan for 20 years,” said Michell. “It doesn’t make any sense.”

The Kanaka Band has already invested $450,000 in feasibility, hydrology and engineering studies, with a similar investment from Green Valley.

B.C. Hydro announced it would pursue five purchase agreements last March with five First Nations projects — including Siwash Creek — including hydro, solar and wind energy projects, as two new generating stations were being commissioned at the time. A purchase agreement allows proponents to sell electricity to B.C. Hydro at a set price.

However, at least ten other “shovel-ready” clean energy projects may be doomed while B.C. Hydro completes a review of its own operations and its place in the energy sector, where legal outcomes like the Squamish power project ruling add uncertainty, including B.C.’s future power needs.

With the 1,100-megawatt Site C Dam planned for completion in 2024, and LNG demand cited to justify it, B.C. Hydro now projects it will have a surplus of electricity until the early 2030s.

Even if British Columbians put 300,000 electric vehicles on the road over the next 12 years, amid BC Hydro’s first call for power, they will require only 300 megawatts of new capacity, the company said.

A long-term surplus could effectively halt all small-scale clean energy development, according to Clean Energy B.C., even as Hydro One’s U.S. coal plant remains online in the region.

“(B.C. Hydro) dropped their offer down to 500 kilowatts right around the time they announced their review,” said Michell. “So we filled out the paperwork at 500 kilowatts and (B.C. Hydro) got to make its announcement of five projects.”

In the new few weeks, Kanaka and Green Valley will discuss whether they can move forward with a new financial model or shelve the project, he said.

B.C. Hydro declined to comment on the rationale for downsizing Siwash Creek’s power purchase agreement.

The Kanaka Bar Band successfully operates a 49.9-megawatt run-of-river plant on Kwoiek Creek with partners Innergex Renewable Energy.

 

Related News

View more

Tracking Progress on 100% Clean Energy Targets

100% Clean Energy Targets drive renewable electricity, decarbonization, and cost savings through state policies, CCAs, RECs, and mandates, with timelines and interim goals that boost jobs, resilience, and public health across cities, counties, and utilities.

 

Key Points

Policies for cities and states to reach 100% clean power by set dates, using mandates, RECs, and interim goals.

✅ Define eligible clean vs renewable resources

✅ Mandate vs goal framework with enforcement

✅ Timelines with interim targets and escape clauses

 

“An enormous amount of authority still rests with the states for determining your energy future. So we can build these policies that will become a postcard from the future for the rest of the country,” said David Hochschild, chair of the California Energy Commission, speaking last week at a UCLA summit on state and local progress toward 100 percent clean energy.

According to a new report from the UCLA Luskin Center for Innovation, 13 states, districts and territories, as well as more than 200 cities and counties, with standout clean energy purchases by Southeast cities helping drive momentum, have committed to a 100 percent clean electricity target — and dozens of cities have already hit it.

This means that one of every three Americans, or roughly 111 million U.S. residents representing 34 percent of the population, live in a community that has committed to or has already achieved 100 percent clean electricity, including communities like Frisco, Colorado that have set ambitious targets.

“We’re going to look back on this moment as the moment when local action and state commitments began to push the entire nation toward this goal,” said J.R. DeShazo, director of the UCLA Luskin Center for Innovation.

Not all 100 percent targets are alike, however. The report notes that these targets vary based on 1) what resources are eligible, 2) how binding the 100 percent target is, and 3) how and when the target will be achieved.

These distinctions will carry a lot of weight as the policy discussion shifts from setting goals to actually meeting targets. They also have implications for communities in terms of health benefits, cost savings and employment opportunities.

 

100% targets come in different forms

One key attribute is whether a target is based on "renewable" or "clean" energy resources. Some 100 percent targets, like Hawaii’s and Rhode Island’s 2030 plan, are focused exclusively on renewable energy, or sources that cannot be depleted, such as wind, solar and geothermal. But most jurisdictions use the broader term “clean energy,” which can also include resources like large hydroelectric generation and nuclear power.

States also vary in their treatment of renewable energy certificates, used to track and assign ownership to renewable energy generation and use. Unbundled RECs allow for the environmental attributes of the renewable energy resource to be purchased separately from the physical electricity delivery.

The binding nature of these targets is also noteworthy. Seven states, as well as Puerto Rico and the District of Columbia, have passed 100 percent clean energy transition laws. Of the jurisdictions that have passed 100 percent legislation, all but one specifies that the target is a “mandate,” according to the report. Nevada is the only state to call the target a “goal.”

Governors in four other states have signed executive orders with 100 percent clean energy goals.

Target timelines also vary. Washington, D.C. has set the most ambitious target date, with a mandate to achieve 100 percent renewable electricity by 2032. Other states and cities have set deadline years between 2040 and 2050. All "100 percent" state laws, and some city and county policies, also include interim targets to keep clean energy deployment on track.

In addition, some locations have included some form of escape clause. For instance, Salt Lake City, which last month passed a resolution establishing a goal of powering the county with 100 percent clean electricity by 2030, included “exit strategies” in its policy in order to encourage stakeholder buy-in, said Mayor Jackie Biskupski, speaking last week at the UCLA summit.

“We don’t think they’ll get used, but they’re there,” she said.

Other locales, meanwhile, have decided to go well beyond 100 percent clean electricity. The State of California and 44 cities have set even more challenging targets to also transition their entire transportation, heating and cooling sectors to 100 percent clean energy sources, and proposals like requiring solar panels on new buildings underscore how policy can accelerate progress across sectors.

Businesses are simultaneously electing to adopt more clean and renewable energy. Six utilities across the United States have set their own 100 percent clean or carbon-free electricity targets. UCLA researchers did not include populations served by these utilities in their analysis of locations with state and city 100 percent clean commitments.

 

“We cannot wait”

All state and local policies that require a certain share of electricity to come from renewable energy resources have contributed to more efficient project development and financing mechanisms, which have supported continued technology cost declines and contributed to a near doubling of renewable energy generation since 2008.

Many communities are switching to clean energy in order to save money, now that the cost calculation is increasingly in favor of renewables over fossil fuels, as more jurisdictions get on the road to 100% renewables worldwide. Additional benefits include local job creation, cleaner air and electricity system resilience due to greater reliance on local energy resources.

Another major motivator is climate change. The electricity sector is responsible for 28 percent of U.S. greenhouse gas emissions, second only to transportation. Decarbonizing the grid also helps to clean up the transportation sector as more vehicles move to electricity as their fuel source.

“The now-constant threat of wildfires, droughts, severe storms and habitat loss driven by climate change signals a crisis we can no longer ignore,” said Carla Peterman, senior vice president of regulatory affairs at investor-owned utility Southern California Edison. “We cannot wait and we should not wait when there are viable solutions to pursue now.”

Prior to joining SCE on October 1, Peterman served as a member of the California Public Utilities Commission, which implements and administers renewable portfolio standard (RPS) compliance rules for California’s retail sellers of electricity. California’s target requires 60 percent of the state’s electricity to come from renewable energy resources by 2030, and all the state's electricity to come from carbon-free resources by 2045.  

 

How CCAs are driving renewable energy deployment

One way California communities are working to meet the state’s ambitious targets is through community-choice aggregation, especially after California's near-100% renewable milestone underscored what's possible, via which cities and counties can take control of their energy procurement decisions to suit their preferences. Investor-owned utilities no longer purchase energy for these jurisdictions, but they continue to operate the transmission and distribution grid for all electricity users.                           

A second paper released by the Luskin Center for Innovation in recent days examines how community-choice aggregators are affecting levels of renewable energy deployment in California and contributing to the state’s 100 percent target.

The paper finds that 19 CCAs have launched in California since 2010, growing to include more than 160 towns, cities and counties. Of those communities, 64 have a 100 percent renewable or clean energy policy as their default energy program.

Because of these policies, the UCLA paper finds that “CCAs have had both direct and indirect effects that have led to increases in the clean energy sold in excess of the state’s RPS.”

From 2011 to 2018, CCAs directly procured 24 terawatt-hours of RPS-eligible electricity, 11 TWh of which have been voluntary or in excess of RPS compliance, according to the paper.

The formation of CCAs has also had an indirect effect on investor-owned utilities. As customers have left investor-owned utilities to join CCAs, the utilities have been left holding contracts for more renewable energy than they need to comply with California’s clean energy targets, amid rising solar and wind curtailments that complicate procurement decisions. UCLA researchers estimate that this indirect effect of CCA formation has left IOUs holding 13 terawatt-hours in excess of RPS requirements.

The paper concludes that CCAs have helped to accelerate California’s ability to meet state renewable energy targets over the past decade. However, the future contributions of CCAs to the RPS are more uncertain as communities make new power-purchasing decisions and utilities seek to reduce their excess renewable energy contracts.

“CCAs offer a way for communities to put their desire for clean energy into action. They're growing fast in California, one of only eight states where this kind of mechanism is allowed," said UCLA's Kelly Trumbull, an author of the report. "State and federal policies could be reformed to better enable communities to meet local demand for renewable energy.”

 

Related News

View more

Ontario pitches support for electric bills

Ontario CEAP Program provides one-time electricity bill relief for residential consumers via local utilities, supports low-income households, aligns with COVID-19 recovery rates, and complements time-of-use pricing options and the winter disconnection ban.

 

Key Points

A one-time electricity bill credit for eligible Ontario households affected by COVID-19, available via local utilities.

✅ Apply through your local distribution company or utility

✅ One-time credit for overdue electricity bills from COVID-19

✅ Complements TOU options, OER, and winter disconnection ban

 

Applications for the CEAP program for Ontario residential consumers has opened. Residential customers across the province can now apply for funding through their local distribution company/utility.

On June 1st, our government announced a suite of initiatives to support Ontario’s electricity consumers amid changes for electricity consumers during the pandemic, including a $9 million investment to support low-income Ontarians through the COVID-19 Energy Assistance Program (CEAP). CEAP will provide a one-time payment to Ontarians who are struggling to pay down overdue electricity bills incurred during the COVID-19 outbreak.

These initiatives include:

  • $9 million for the COVID-19 Energy Assistance Program (CEAP) to support consumers struggling to pay their energy bills during the pandemic. CEAP will provide one-time payments to consumers to help pay down any electricity bill debt incurred over the COVID19 period. Applications will be available through local utilities in the upcoming months;
  • $8 million for the COVID-19 Energy Assistance Program for Small Business (CEAP-SB) to provide support to businesses struggling with bill payments as a result of the outbreak; and
  • An extension of the Ontario Energy Board’s winter disconnection ban until July 31, 2020 to ensure no one is disconnected from their natural gas or electricity service during these uncertain times.


More information about applications for the CEAP for Small Business will be coming later this summer, as electricity rates are about to change across Ontario for many customers.

In addition, the government recently announced that it will continue the suspension of time-of-use (TOU) electricity rates and, starting on June 1, 2020, customers will be billed based on a new fixed COVID-19 hydro rate of 12.8 cents per kilowatt hour. The COVID-19 Recovery Rate, which some warned in analysis could lead to higher hydro bills will be in place until October 31, 2020.

Later in the pandemic, Ontario set electricity rates at the off-peak price until February 7 to provide additional relief.

“Starting November 1, 2020, our government has announced Ontario electricity consumers will have the option to choose between time-of-use and tiered electricity pricing plan, following the Ontario Energy Board’s new rate plan prices and support thresholds announcement. We are proud to soon offer Ontarians the ability to choose an electricity plan that best suits for their lifestyle,” said Jim McDonell, MPP for Stormont–Dundas–South Glengarry.

The government will continue to subsidize electricity bills by 31.8 per cent through the Ontario Electricity Rebate.

The government is providing approximately $5.6 billion in 2020-21 as part of its existing electricity cost relief programs and conservation initiatives such as the Peak Perks program to help ensure more affordable electricity bills for eligible residential, farm and small business consumers.

 

Related News

View more

Ireland and France will connect their electricity grids - here's how

Celtic Interconnector, a subsea electricity link between Ireland and France, connects EU grids via a high-voltage submarine cable, boosting security of supply, renewable integration, and cross-border trade with 700 MW capacity by 2026.

 

Key Points

A 700 MW subsea link between Ireland and France, boosting security, enabling trade, and supporting renewables.

✅ Approx. 600 km subsea cable from East Cork to Brittany

✅ 700 MW capacity; powers about 450,000 homes

✅ Financed by EIB, banks, CEF; Siemens Energy and Nexans

 

France and Ireland signed contracts on Friday to advance the Celtic Interconnector, a subsea electricity link to allow the exchange of electricity between the two EU countries. It will be the first interconnector between continental Europe and Ireland, as similar UK interconnector plans move forward in parallel. 

Representatives for Ireland’s electricity grid operator EirGrid and France’s grid operator RTE signed financial and technical agreements for the high-voltage submarine cable, mirroring developments like Maine’s approved transmission line in North America for cross-border power. The countries’ respective energy ministers witnessed the signing.

European commissioner for energy Kadri Simson said:

In the current energy market situation, marked by electricity price volatility, and the need to move away from imports of Russian fossil fuels, European energy infrastructure has become more important than ever.

The Celtic Interconnector is of paramount importance as it will end Ireland’s isolation from the Union’s power system, with parallels to Cyprus joining the electricity highway in the region, and ensure a reliable high-capacity link improving the security of electricity supply and supporting the development of renewables in both Ireland and France.

EirGrid and RTE signed €800 million ($827 million) worth of financing agreements with Barclays, BNP Paribas, Danske Bank, and the European Investment Bank, similar to the Lake Erie Connector investment that blends public and private capital.

In 2019, the project was awarded a Connecting Europe Facility (CEF) grant worth €530.7 million to support construction works and align with a broader push for electrification in Europe under climate strategies. The CEF program also provided €8.3 million for the Celtic Interconnector’s feasibility study and initial design and pre-consultation.

Siemens Energy will build converter stations in both countries, and Paris-based global cable company Nexans will design and install a 575-km-long cable for the project.

The cable will run between East Cork, on Ireland’s southern coast, and northwestern France’s Brittany coast and will connect into substations at Knockraha in Ireland and La Martyre in France.

The Celtic Interconnector, which is expected to be operational by 2026, will be approximately 600 km (373 miles) long and have a capacity of 700 MW, similar to cross-border initiatives such as Quebec-to-New York power exports expected in 2025, which is enough to power 450,000 households.

 

Related News

View more

Purdue: As Ransomware Attacks Increase, New Algorithm May Help Prevent Power Blackouts

Infrastructure Security Algorithm prioritizes cyber defense for power grids and critical infrastructure, mitigating ransomware, blackout risks, and cascading failures by guiding utilities, regulators, and cyber insurers on optimal security investment allocation.

 

Key Points

An algorithm that optimizes security spending to cut ransomware and blackout risks across critical infrastructure.

✅ Guides utilities on optimal security allocation

✅ Uses incentives to correct human risk biases

✅ Prioritizes assets to prevent cascading outages

 

Millions of people could suddenly lose electricity if a ransomware attack just slightly tweaked energy flow onto the U.S. power grid, as past US utility intrusions have shown.

No single power utility company has enough resources to protect the entire grid, but maybe all 3,000 of the grid's utilities could fill in the most crucial security gaps if there were a map showing where to prioritize their security investments.

Purdue University researchers have developed an algorithm to create that map. Using this tool, regulatory authorities or cyber insurance companies could establish a framework for protecting the U.S. power grid that guides the security investments of power utility companies to parts of the grid at greatest risk of causing a blackout if hacked.

Power grids are a type of critical infrastructure, which is any network - whether physical like water systems or virtual like health care record keeping - considered essential to a country's function and safety. The biggest ransomware attacks in history have happened in the past year, affecting most sectors of critical infrastructure in the U.S. such as grain distribution systems in the food and agriculture sector and the Colonial Pipeline, which carries fuel throughout the East Coast, prompting increased military preparation for grid hacks in the U.S.

With this trend in mind, Purdue researchers evaluated the algorithm in the context of various types of critical infrastructure in addition to the power sector, including electricity-sector IoT devices that interface with grid operations. The goal is that the algorithm would help secure any large and complex infrastructure system against cyberattacks.

"Multiple companies own different parts of infrastructure. When ransomware hits, it affects lots of different pieces of technology owned by different providers, so that's what makes ransomware a problem at the state, national and even global level," said Saurabh Bagchi, a professor in the Elmore Family School of Electrical and Computer Engineering and Center for Education and Research in Information Assurance and Security at Purdue. "When you are investing security money on large-scale infrastructures, bad investment decisions can mean your power grid goes out, or your telecommunications network goes out for a few days."

Protecting infrastructure from hacks by improving security investment decisions

The researchers tested the algorithm in simulations of previously reported hacks to four infrastructure systems: a smart grid, industrial control system, e-commerce platform and web-based telecommunications network. They found that use of this algorithm results in the most optimal allocation of security investments for reducing the impact of a cyberattack.

The team's findings appear in a paper presented at this year's IEEE Symposium on Security and Privacy, the premier conference in the area of computer security. The team comprises Purdue professors Shreyas Sundaram and Timothy Cason and former PhD students Mustafa Abdallah and Daniel Woods.

"No one has an infinite security budget. You must decide how much to invest in each of your assets so that you gain a bump in the security of the overall system," Bagchi said.

The power grid, for example, is so interconnected that the security decisions of one power utility company can greatly impact the operations of other electrical plants. If the computers controlling one area's generators don't have adequate security protection, as seen when Russian hackers accessed control rooms at U.S. utilities, then a hack to those computers would disrupt energy flow to another area's generators, forcing them to shut down.

Since not all of the grid's utilities have the same security budget, it can be hard to ensure that critical points of entry to the grid's controls get the most investment in security protection.

The algorithm that Purdue researchers developed would incentivize each security decision maker to allocate security investments in a way that limits the cumulative damage a ransomware attack could cause. An attack on a single generator, for instance, would have less impact than an attack on the controls for a network of generators, which sophisticated grid-disruption malware can target at scale, rather than for the protection of a single generator.

Building an algorithm that considers the effects of human behavior

Bagchi's research shows how to increase cybersecurity in ways that address the interconnected nature of critical infrastructure but don't require an overhaul of the entire infrastructure system to be implemented.

As director of Purdue's Center for Resilient Infrastructures, Systems, and Processes, Bagchi has worked with the U.S. Department of Defense, Northrop Grumman Corp., Intel Corp., Adobe Inc., Google LLC and IBM Corp. on adopting solutions from his research. Bagchi's work has revealed the advantages of establishing an automatic response to attacks, and analyses like Symantec's Dragonfly report highlight energy-sector risks, leading to key innovations against ransomware threats, such as more effective ways to make decisions about backing up data.

There's a compelling reason why incentivizing good security decisions would work, Bagchi said. He and his team designed the algorithm based on findings from the field of behavioral economics, which studies how people make decisions with money.

"Before our work, not much computer security research had been done on how behaviors and biases affect the best defense mechanisms in a system. That's partly because humans are terrible at evaluating risk and an algorithm doesn't have any human biases," Bagchi said. "But for any system of reasonable complexity, decisions about security investments are almost always made with humans in the loop. For our algorithm, we explicitly consider the fact that different participants in an infrastructure system have different biases."

To develop the algorithm, Bagchi's team started by playing a game. They ran a series of experiments analyzing how groups of students chose to protect fake assets with fake investments. As in past studies in behavioral economics, they found that most study participants guessed poorly which assets were the most valuable and should be protected from security attacks. Most study participants also tended to spread out their investments instead of allocating them to one asset even when they were told which asset is the most vulnerable to an attack.

Using these findings, the researchers designed an algorithm that could work two ways: Either security decision makers pay a tax or fine when they make decisions that are less than optimal for the overall security of the system, or security decision makers receive a payment for investing in the most optimal manner.

"Right now, fines are levied as a reactive measure if there is a security incident. Fines or taxes don't have any relationship to the security investments or data of the different operators in critical infrastructure," Bagchi said.

In the researchers' simulations of real-world infrastructure systems, the algorithm successfully minimized the likelihood of losing assets to an attack that would decrease the overall security of the infrastructure system.

Bagchi's research group is working to make the algorithm more scalable and able to adapt to an attacker who may make multiple attempts to hack into a system. The researchers' work on the algorithm is funded by the National Science Foundation, the Wabash Heartland Innovation Network and the Army Research Lab.

Cybersecurity is an area of focus through Purdue's Next Moves, a set of initiatives that works to address some of the greatest technology challenges facing the U.S. Purdue's cybersecurity experts offer insights and assistance to improve the protection of power plants, electrical grids and other critical infrastructure.

 

Related News

View more

Sign Up for Electricity Forum’s Newsletter

Stay informed with our FREE Newsletter — get the latest news, breakthrough technologies, and expert insights, delivered straight to your inbox.

Electricity Today T&D Magazine Subscribe for FREE

Stay informed with the latest T&D policies and technologies.
  • Timely insights from industry experts
  • Practical solutions T&D engineers
  • Free access to every issue

Live Online & In-person Group Training

Advantages To Instructor-Led Training – Instructor-Led Course, Customized Training, Multiple Locations, Economical, CEU Credits, Course Discounts.

Request For Quotation

Whether you would prefer Live Online or In-Person instruction, our electrical training courses can be tailored to meet your company's specific requirements and delivered to your employees in one location or at various locations.