2018 IEEE PES T&D

Cybersecurity of the Electric Power Transmission and Distribution System (Room 207)

Cyber-attack on an Electric Power T&D communications system can have a devastating impact and cause widespread power outages as evident from the December 2015 cyber-attack on a Ukrainian Electric Power Distribution System. Securing Electric Power Systems from cyber-attacks is of national importance and in North America NERC is spearheading the effort in developing and enforcing Critical Infrastructure Protection (CIP) Standards for Bulk Electric System (BES).  Local and state regulating agencies are also looking at cybersecurity of the Electric Power Distribution Systems. Substation protection, automation and control systems along with distribution field devices have changed significantly in the past decade. These systems have become more interconnected and provide end users with much more information to allow for higher reliability and greater levels of control. Interoperability between different vendor products and systems has been achieved using open standards. This change in technology has not only brought huge benefits from an operational point of view, it also permits to address cyber security issues similar to other traditional enterprise systems which have been facing the same industry challenges for years. This tutorial will discuss cybersecurity basics including passwords and access management, authentication, encryption, network security monitoring, techniques in cyber alarming, logging and auditing. This tutorial will also cover NERC CIP requirements applicable to T&D systems along with brief overview of IEEE and IEC standards. Cybersecurity implementation examples of substation protection, automation and controls systems including devices inside, as well as outside the substations will also be discussed. Utility perspective on Cybersecurity and NERC CIP compliance will be included.