Cybersecurity vulnerabilities result from system integrity
As a result, it is essential to protect the nation's electrical grid as rogue forces could use it as a weapon of mass destruction. However, Shaw doesn't believe that most security threats against the electrical grid stems from outside the nation. Instead, security breaches happen at a more practical level.
"It's about basic system integrity, malware coming in over the internet and getting on to a PC that's connected to a [utility's] control system," he said. "There's also just basic mistakes and human error."
In fact, Shaw said cybersecurity strategies should focus on deploying best practices and putting in efficient change control procedures to improve reliability, including adhering to the mandated NERC Standards CIP-002 through CIP-009 that provides a cybersecurity framework for the identification and protection of critical cyber assets.
"That's what security is about," he said. "Every time someone opens a connection they need to close it. It's also about keeping software and operating systems up to date. So we get into issues of data integrity when talking about cybersecurity."
In addition, wireless does not, in itself, make utilities more vulnerable to issues of cybersecurity, Shaw said. Although wireless does create some extent of openness, intrusion detection software protects networks. He said such defense-of-depth strategies are crucial and the use of layered security defenses in an application can reduce the chance of a successful attack. In addition, incorporating redundant security mechanisms requires an attacker to circumvent each mechanism to gain access to a digital asset. For example, a software system with authentication checks may prevent an attacker that has subverted a firewall.
Shaw said defending an application with multiple layers can prevent a single point of failure that compromises the security of the application.
"I don't think wireless by itself or decreases the threat but it does show the critical importance of having multiple layers of security," Shaw said. "In fact, just because [cyber attackers] can get through the physical access layer of wireless, and maybe get through that first encryption layer to a connection point, that should not give them very much power by itself."
Related News

China boosts wind energy, photovoltaic and concentrated solar power
BEIJING - China leads renewable energies, installing more wind power, solar thermal and photovoltaic than any other country, but also leads CO2 emissions, and much remains to be done.
The effective application of Chinas renewable energy law has boosted the use of renewable energy in the country and facilitated the rapid development of the sector, a report said.
The report on compliance with renewable energy law was presented today at the current bimonthly session of the Standing Committee of the National Peoples Assembly (APN).
Electricity generated by renewable energy amounted to about 1.87 trillion kilowatts per hour in 2018, representing 26.7 percent of…