Cybersecurity vulnerabilities result from system integrity
As a result, it is essential to protect the nation's electrical grid as rogue forces could use it as a weapon of mass destruction. However, Shaw doesn't believe that most security threats against the electrical grid stems from outside the nation. Instead, security breaches happen at a more practical level.
"It's about basic system integrity, malware coming in over the internet and getting on to a PC that's connected to a [utility's] control system," he said. "There's also just basic mistakes and human error."
In fact, Shaw said cybersecurity strategies should focus on deploying best practices and putting in efficient change control procedures to improve reliability, including adhering to the mandated NERC Standards CIP-002 through CIP-009 that provides a cybersecurity framework for the identification and protection of critical cyber assets.
"That's what security is about," he said. "Every time someone opens a connection they need to close it. It's also about keeping software and operating systems up to date. So we get into issues of data integrity when talking about cybersecurity."
In addition, wireless does not, in itself, make utilities more vulnerable to issues of cybersecurity, Shaw said. Although wireless does create some extent of openness, intrusion detection software protects networks. He said such defense-of-depth strategies are crucial and the use of layered security defenses in an application can reduce the chance of a successful attack. In addition, incorporating redundant security mechanisms requires an attacker to circumvent each mechanism to gain access to a digital asset. For example, a software system with authentication checks may prevent an attacker that has subverted a firewall.
Shaw said defending an application with multiple layers can prevent a single point of failure that compromises the security of the application.
"I don't think wireless by itself or decreases the threat but it does show the critical importance of having multiple layers of security," Shaw said. "In fact, just because [cyber attackers] can get through the physical access layer of wireless, and maybe get through that first encryption layer to a connection point, that should not give them very much power by itself."
Related News

Australia's energy transition stalled by stubbornly high demand
MELBOURNE - A more than 200% increase in installed solar power generation capacity since 2018 helped Australia rank sixth globally in terms of solar capacity last year and emerge as one of the world's fastest-growing major renewable energy producers.
However, to realise its goal of becoming a net-zero carbon emitter by 2050, Australia must reverse the trajectory of its energy use, which remains on a rising path in contrast with several peers that have curbed energy use in recent years.
Australia's total electricity consumption has grown nearly 8% over the past decade, compared with contractions over the same period of more than…