Cybersecurity vulnerabilities result from system integrity

subscribe

Cybersecurity is a major threat to utilities' operations, said John Shaw, a senior vice president with Industrial Defender, at the Utilities Telecom Council's annual conference.

As a result, it is essential to protect the nation's electrical grid as rogue forces could use it as a weapon of mass destruction. However, Shaw doesn't believe that most security threats against the electrical grid stems from outside the nation. Instead, security breaches happen at a more practical level.

"It's about basic system integrity, malware coming in over the internet and getting on to a PC that's connected to a [utility's] control system," he said. "There's also just basic mistakes and human error."

In fact, Shaw said cybersecurity strategies should focus on deploying best practices and putting in efficient change control procedures to improve reliability, including adhering to the mandated NERC Standards CIP-002 through CIP-009 that provides a cybersecurity framework for the identification and protection of critical cyber assets.

"That's what security is about," he said. "Every time someone opens a connection they need to close it. It's also about keeping software and operating systems up to date. So we get into issues of data integrity when talking about cybersecurity."

In addition, wireless does not, in itself, make utilities more vulnerable to issues of cybersecurity, Shaw said. Although wireless does create some extent of openness, intrusion detection software protects networks. He said such defense-of-depth strategies are crucial and the use of layered security defenses in an application can reduce the chance of a successful attack. In addition, incorporating redundant security mechanisms requires an attacker to circumvent each mechanism to gain access to a digital asset. For example, a software system with authentication checks may prevent an attacker that has subverted a firewall.

Shaw said defending an application with multiple layers can prevent a single point of failure that compromises the security of the application.

"I don't think wireless by itself or decreases the threat but it does show the critical importance of having multiple layers of security," Shaw said. "In fact, just because [cyber attackers] can get through the physical access layer of wireless, and maybe get through that first encryption layer to a connection point, that should not give them very much power by itself."

Related News

uk electricity prices force

Energy UK - Switching surge continues

LONDON - More than 600,000 customers took steps to save on their energy bills this winter by switching electricity provider in October, the latest figures from Energy UK reveal.

A third (32 per cent) of those changing providers in October moved to small and mid-tier suppliers.

With recent research showing that that nine in ten energy switchers were happy with the process of changing suppliers and with the reassurance provided by the Energy Switch Guarantee - a series of commitments ensuring switches are simple, speedy and safe - more and more customers are now confident when looking to move.

Lawrence Slade, chief executive of Energy UK said:…

READ MORE
puerto rico solar power panels

Canadian Solar and Tesla contribute to resilient electricity system for Puerto Rico school

READ MORE

TransAlta Scraps Wind Farm as Alberta's Energy Future Blusters

TransAlta Scraps Wind Farm as Alberta's Energy Future Blusters

READ MORE

ontario nuclear plant

Analysis: Why is Ontario’s electricity about to get dirtier?

READ MORE

energy storage

E.ON to Commission 2500 Digital Transformer Stations

READ MORE