Smart grid information security - A research on standards

APAP 2011 - Proceedings: 2011 International Conference on Advanced Power System Automation and Protection

Volumn 2, Issue , 2011, Pages 1188-1194

  Wang, YuFei ^a,b   Zhang, Bo ^b   Lin, WeiMin ^a,b   Zhang, Tao ^a,b  

^a NARI GROUP CORPORATION STATE GRID ELECTRIC POWER RESEARCH INSTITUTE   (China)

^b STATE GRID CORPORATION OF CHINA   (China)

Author keywords

architecture; cyber security; information security; smart grid; standards

Indexed keywords

COMMON INFORMATION; CYBER SECURITY; DIFFERENT DOMAINS; ELECTRIC POWER UTILITIES; HIERARCHICAL INFORMATION; INFORMATION AND COMMUNICATION; SECURITY RISKS; SECURITY STANDARDS; SMART GRID; THREE DIMENSIONS;

ARCHITECTURE; COMMUNICATION; INFORMATION THEORY; SMART POWER GRIDS; STANDARDS;

SECURITY OF DATA;

EID: 84860663248     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/APAP.2011.6180558     Document Type: Conference Paper

References (38)

1. V. C. Gungor, et al., "Opportunities and Challenges of Wireless Sensor Networks in Smart Grid - A Case Study of Link Quality Assessments in Power Distribution Systems," Industrial Electronics, IEEE Transactions on, vol. PP, pp. 1-1, 2010.
2. H. Farhangi, "The path of the smart grid," Power and Energy Magazine, IEEE, vol. 8, pp. 18-28, 2010.
3. H. Khurana, et al., "Smart-Grid Security Issues," Security & Privacy, IEEE, vol. 8, pp. 81-85, 2010.
4. National Energy Technology Laboratory. http://www.netl.doe.gov/
5. European Commission. European technology platform smartgrids: vision and strategy for Europe's electricity networks of the future. http://ec.europa.eu/ research/energy/pdf/smartgrids-en.pdf
6. LIU Zhen-ya. Smart Grid Technology(in chinses). China electric power press,2010.04.
7. National Institute of Standards and Technology(NIST). Guidelines for Smart Grid Cyber Security: Vol.1, Smart Grid Cyber Security Strategy, Architecture, and High-Level Requirements. August, 2010. http://csrc.nist.gov/ publications/nistir/ir7628/nistir-7628-vol1.pdf.
8. National Institute of Standards and Technology(NIST). Guidelines for Smart Grid Cyber Security: Vol.2, Privacy and the Smart Grid. August, 2010. http://csrc.nist.gov/publications/nistir/ir7628/nistir-7628-vol2.pdf.
9. National Institute of Standards and Technology(NIST). Guidelines for Smart Grid Cyber Security: Vol.3, Supportive Analyses and References. August, 2010. http://csrc.nist.gov/publications/nistir/ir7628/nistir-7628-vol1.pdf.
10. National Institute of Standards and Technology(NIST). Guidelines on Cell Phone and PDA Security. http://csrc.nist.gov/publications/nistpubs/800-124/ SP800-124.pdf.
11. GB/T 22239-2008. Information seucirty technology - Baseline for classified protection of information system.
12. ISO/IEC. Information technology - Security techniques - Information security management systems. http://www.27000.org/.
13. National Institute of Standards and Technology(NIST). Managing Information Security Risk - Organization, Mission, and Information System View. http://csrc.nist.gov/publications/nistpubs/800-39/SP800-39-final.pdf.
14. National Institute of Standards and Technology(NIST). Minimum Security Requirements for Federal Information and Infromation Systems. http://csrc.nist.gov/publications/fips/fips200/FIPS-200-final-march.pdf.
15. North American Electric Reliability Corporation(NERC). Security Guidelines for the Electricity Sector: Vulnerability and Assessment.
16. U.S. Government Accountability Office(U.S. GAO). Cyber security for Critical Infrastructure Protection. http://www.gao.gov/new.items/d04321.pdf.
17. Information Security Forum(ISF). The Standard of good practice for information security. http://www.netbotz.com/library/Info-Security-Forum- Standard-Good-Practices.pdf.
18. European Network and Information Security Agency(ENISA). Cloud Computing - Benefits, risks and recommendations for information security. http://www.afei.org/events/0A02/Documents/ Cloud%20Computing%20Security%20Risk%20Assessment%5B1%5D.pdf.
19. European Network and Information Security Agency(ENISA). Cloud Computing - Information Assurance Framework . http://www.enisa.europa.eu/.
20. Cloud Security Alliance (CSA). Security Guidance for Critical Areas of Focus in Cloud Computing. https://cloudsecurityalliance.org/.
21. National Institute of Standards and Technology(NIST). Security Considerations in the Information System Development Life Cycle. http://csrc.nist.gov/publications/PubsSPs.html.
22. Microsoft. Security Development Lifecycle. http://www.microsoft.com/ security/sdl/default.aspx.
23. CPNI. Good Practice Guide, Process Control and SCADA Security. Centre for the Protection of National Infrastructure (CPNI), 2005.
24. The International Society of Automation(ISA). ANSI/ISA-99.00.01-2007. Security for Industrial Automation and Control Systems Part 1: Terminology, Concepts, and Models. http://www.isa.org/filestore/expo/2009/PressKit/ Information%20about%20ISA/Membership/ Samples%20of%20Free%20ISA%20Standards%20and%20Technical%20Papers/ ANSI%20ISA%2099-00-01%20%202007.pdf.
25. The International Society of Automation(ISA). ANSI/ISA-99 Security for Industrial Automation and Control Systems. Part2: Establishing a Manufacturing and Control Systems Security Program.
26. DOE. 21 steps to Improve Cyber Security of SCADA Networks. Office of Energy Assurance, U.S. Department of Energy, 2002.
27. K. Stouffer, J. Falco, K. Scarfone, "Guide to Industrial Control Systems(ICS) Security Special Publication 800-82, Second public draft, National Institute of Standards and Technology, September 2007.
28. National Institute of Standards and Technology(NIST). Recommended Security Controls for Federal Information Systems (including those for Bulk Power System)(NIST SP 800-53). http://csrc.nist.gov/publications/nistpubs/800- 53-Rev3/sp800-53-rev3-final-updated-errata-05-01-2010.pdf.
29. Advanced Security Acceleration Project(ASAP) - Smart Grid. Advanced Metering Infrastructure(AMI) System Security Requirements. http://www.oe.energy. gov/DocumentsandMedia/14-AMI-System-Security-Requirements.pdf.
30. Advanced Security Acceleration Project(ASAP) - Smart Grid. Security Profile for Advanced Metering Infrastructure. http://osgug.ucaiug.org/utilisec/ amisec/Shared%20Documents/AMI%20Security%20Profile%20(ASAP-SG)/ AMI%20Security%20Profile%20-%20v1-0.pdf.
31. UtilityAMI. Home Area Network System Requirements Specification. http://www.utilityami.org/docs/UtilityAMI%20HAN%20SRS%20-%20v1. 04%20-%20080819-1.pdf.
32. IEC. IEC 62351 1-8, Power System Control and Associated Communications - Data and Communication Security. http://webstore.iec.ch/webstore/webstore.nsf/ mysearchajax?Openform&key=62351&sorting=&start=1.
33. IEEE. IEEE 1686-2007, IEEE Standard for Substation Intelligent Electronic Devices(IED) Cyber Security Capabilities. http://ieeexplore.ieee.org/xpl/ freeabs-all.jsp?reload=true&arnumber=4453853.
34. North American Electric Reliablity Corporation(NERC). CIP-002, 003-009. http://www.nerc.com/page.php?cid=2|20.
35. DHS. Cyber Security Procurement Language for Control Systems. DHS, August 2008.
36. NIST. System Protection Profile - Industrial Control Systems, Version 1.0, National Institute of Standards and Technology (NIST), April 2004.
37. DHS. Catalog of Control Systems Security: Recommendations for Standards Developers. http://www.us-cert.gov/control-systems/pdf/Catalog-of-Control- Systems-Security-Recommendations.pdf.
38. ISA. Wireless Standards. http://www.isa.org//MSTemplate.cfm?MicrositeID= 1134&CommitteeID=6891.