Applied Cyber Security and the Smart Grid: Implementing Security Controls into the Modern Power Infrastructure

Applied Cyber Security and the Smart Grid: Implementing Security Controls into the Modern Power Infrastructure

Volumn , Issue , 2013, Pages 1-202

  Knapp, Eric D ^a   Samani, Raj ^b  

^a Wurldtech Security Technologies   (Canada)

^b McAfee EMEA ^*  (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84886241440     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1016/C2012-0-01113-1     Document Type: Book

References (138)

1. Lawrence Bernie, Hancock Martin, Stieva Ginni. White Paper: How unreliable power affects the business value of a hospital? Schneider Electric; December 2010.
2. Murphy Paul, et al. Enabling Tomorrow's electricity system: report of the Ontario Smart Grid forum September 2010, Independent Electricity System Operator (IESO), Toronto, ON.
3. The Office of Electricity Delivery and Energy Reliability (OE).
4. Resilience of the National Electricity Network House of commons March 2004, Trade and Industry Committee, London, UK.
5. Vega Cynthia. ERCOT warns of more rolling blackouts [document on the Internet]; February 2011. <> [cited July 2012]. http://abcnews.go.com/US/story?id=90244&page=1#.T_sWDWh1RhN.
6. Sealey Geraldine. Power outage brought terror worries. New York: ABC News [document from the Internet]; August 2011. <> [cited July 2012]. http://www.wfaa.com/news/local/ERCOT-warns-of-more-rolling-blackouts-115709399.html.
7. Coordinated terrorist attacks on global energy infrastructure. Washington, DC: The Heritage Foundation; March 2011.
8. Ford Matt, CNN. Can a 'Smart Grid' turn us on to energy efficiency? [document on the Internet]; March 2009. <> [cited July 2012]. http://articles.cnn.com/2009-03-01/tech/eco.smartgrid_1_smart-grid-energy-efficiency-national-electricity-grid?_s=PM:TECH.
9. Litos Strategic Communication. How the Smart Grid promotes a greener future [document on the Internet]. <> [cited July 2012]. http://energy.gov/sites/prod/files/oeprod/DocumentsandMedia/Environmentalgroups.pdf.
10. Bajaj Vikas. India struggles to deliver enough power. New York Times [document from the Internet]; April 2012. <> [cited July 2012]. http://www.nytimes.com/2012/04/20/business/global/india-struggles-to-deliver-enough-electricity-for-growth.html?pagewanted=all.
11. BBC News. The costs of nuclear energy [document on the Internet]. <> [cited July 2012]. http://news.bbc.co.uk/1/hi/business/7180539.stm.
12. US Department of Energy. DOE NP2010 nuclear power plant construction infrastructure assessment. Washington, DC; October, 2005.
13. Pennington Nicole, Naassan Nicole. Electric vehicles: fact and fiction. Smart Grid News [document from the Internet]; November 2011. <> [cited July 2012]. http://www.smartgridnews.com/artman/publish/End_Use_Electric_Transportation/Electric-vehicles-Fact-and-fiction-4268.html.
14. Smart Grid News. New effort exploring ways to reduce T&D loss and save power [document on the Internet]; November 4, 2009. <> [cited July 1, 2012]. http://www.smartgridnews.com/artman/publish/Delivery_Transmission_News/New-Effort-Looking-at-Ways-to-Reduce-T-D-Loss-and-Save-Power-1362.html.
15. McAfee and the Center for Strategic and International Studies (CSIS). In the dark: crucial industries confront cyberattacks. Santa Clara, CA; 2011.
16. Smart Grid Australia: maximising consumer benefits.
17. Subnet Solutions. Substation automation market to hit $4.3billion by 2020 [document on the Internet]; August 2012. <> [cited November 2012]. http://www.subnet.com/news-events/press-releases/substation-automation-market-to-hit-4-3-billion-by-2020.aspx.
18. Knapp Eric Industrial network security: securing critical infrastructure network for Smart Grid, SCADA, and other industrial control systems 2011, Syngress, Waltham, MA.
19. Ombello Carlo. Nuclear vs solar: clash of the numbers [document on the Internet]; August 2010. <> [cited July 2012]. http://www.opportunityenergy.org/?p=215.
20. Nuclear Energy Institute. US nuclear power plants [document on the Internet]; <> [cited July 2012]. http://www.nei.org/resourcesandstats/nuclear_statistics/usnuclearpowerplants/.
21. US CERT. Control systems security program (CSSP), industrial control systems cyber emergency response team [document on the Internet]; <> [cited July 2012]. http://www.us-cert.gov/control_systems/ics-cert.
22. Lagner Ralph. In 2011 ACS conference, September 21, Washington DC; 2011.
23. Sorebo Gilbert N, Echols Michael C Smart Grid security: an end-to-end view of security in the new electrical Grid 2011, CRC Press, Boca Raton, FL.
24. Fisher Dennis. Attack tool released to exploit SSL DoS issue. Threat post [document on the Internet]; October 2001. <> [cited July 2012]. http://threatpost.com/en_us/blogs/attack-tool-released-exploit-ssl-dos-issue-102411.
25. Common Vulnerabilities and Exposures. CVE-2011-3389 [document on the Internet]; <> [cited July 2012]. http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389.
26. United States Department of Energy. ICS-ALERT-12-046-01-Increasing threat to industrial control systems, February 2012.
27. Stenbakken Gerard., Nelson Tom. Gaithersburg, MD: National Institute of Standards and Technology; Zhou Ming., Virgilio Centeno. Virginia Polytechnic Institute and State University. Reference values for dynamic calibration of PMUs. Blacksburg, VA.
28. IEEE Power System Relaying Committee Working Group D6. Power swing and out-of-step considerations on transmission lines, IEEE; 2005.
29. McDonald John. P.E. Substation automation basics-the next generation. Electric energy online [document on the Internet]. <> [cited July 2012]. http://www.electricenergyonline.com/?page=show_article&mag=43&article=321.
30. EPRI. Advanced metering infrastructure (AMI). Palo Alto, California; 2007.
31. HEMS Technology. Energy efficiencies in a home energy management system (HEMS) [document from the Internet]; August 9, 2010. <> [cited october 2, 2012]. http://hemstech.com/blog/?p=66.
32. Brian Krebs. FBI: smart meter hacks likely to spread [document on the Internet]; April 2012. <> [cited July 2012]. http://krebsonsecurity.com/2012/04/fbi-smart-meter-hacks-likely-to-spread/.
33. Pike Research. Abstract of microgrids: distributed energy systems for campus, military, remote, community, and commercial & industrial power applications: market analysis and forecasts. Navigant Consulting, Inc. 1Q, 2012 [document from the Internet]. <> [cited October 3 2012]. http://www.pikeresearch.com/research/microgrids.
34. Schwerin Claire Heininger. Army deploys microgrids in Afghanistan for "smart" battlefield power. United States Army PEO C3T. [document from the Internet]; June 28 2011. <> [cited October 3 2012]. http://www.army.mil/article/60709/.
35. The Smart Grid Interoperability Panel-Cyber Security Working Group. NISTIR 7628 guidelines for Smart Grid cyber security: vol. 1, Smart Grid cyber security strategy, architecture, and high-level requirements. US Department of Commerce, National Institute of Standards and Technologies; August 2010.
36. Martin K.E., Hamai D., Adamiak M.G., Anderson S., Begovic M., Benmouyal G., Brunello G., Burger J., Cai J.Y., Dickerson B., Gharpure V., Kennedy B., Karlsson D., Phadke A.G., Salj J., Skendzic V., Sperr J., Song Y., Huntley C., Kasztenny B., Price E. Exploring the IEEE standard C37.118-2005. IEEE Trans Power Deliv 2008, 23(4).
37. Adamiak Mark, Premerlani William, Kasztenny Bogdan. Synchrophasors: definition, measurement, and application [document on the Internet]. <> [cited October 5 2012]. http://www.gedigitalenergy.com/multilin/products/synchrophasors/synchrophasors.pdf.
38. IEC Technical Specification 62351-1. Power systems management and associated information exchange-data and communications security Part 1: communication network and system security-Introduction to security issues. Geneva, Switzerland: International Electrotechnical Commission (IEC); 2007.
39. IEC Technical Specification 62351-6. Power systems management and associated information exchange-data and communications security Part 6: Security for IEC 61850. Geneva, Switzerland: International Electrotechnical Commission (IEC); 2007.
40. The ZigBee Alliance. About ZigBee [document from the Internet]. <> [cited July 2012]. http://www.zigbee.org.
41. S4 Proceedings series (digital bond's SCADA security scientific symposium , 2007-2010) 2010, Digital Bond Press, Miami, FL. D. Peterson (Ed.).
42. William H, Bartley PE. Analysis of transformer failures In International association of engineering insurers 36th annual conference. Stockholm; 2003.
43. ICS-CERT. ICS-ALERT-12-046-01-increasing threat to industrial control systems. US Department of Homeland Security; February 15, 2012.
44. Knapp Eric D. Industrial network security: securing critical infrastructure networks for Smart Grid, SCADA, and other industrial control systems August 29, 2011, Syngress, Massachusetts.
45. Franz Matt. DNP3 recon. Digital bond [document from Internet]; October 18, 2006. <> [cited December 23, 2010]. http://www.digitalbond.com/index.php/2006/10/18/dnp3-recon/.
46. Falliere Nicolas, Murchu Liam O, Chien Eric. Symantec. W32.St****t Dossier, Version1.4; February 2011.
47. Santamarta Ruben. Attacking controllogix. Digital Bond Project Base Camp.
48. Wurldtech Security Technologies. Achilles test platform product profile [Document on the Internet]. <> [cited August 27, 2012]. http://www.wurldtech.com/cyber-security-products/achilles-testplatform/product-profile.aspx.
49. ICS-CERT. ICS-CERT advisories and reports archive [document from the Internet]. <> [cited October 20, 2012]. http://www.us-cert.gov/control_systems/ics-cert/archive.html.
50. ODVA. [document on the Internet]. <> [cited August 27, 2012]. http://www.odva.org/default.aspx?tabid=102.
51. Digital Bond. Basecamp [document on the Internet]. <> [cited August 12, 2012]. http://www.digitalbond.com/tools/basecamp/.
52. Siemens AG. SIMATIC STEP 7 V11-controller software in the TIA portal [document on the Internet]. <> [cited September 5, 2012]. http://www.industry.siemens.com/topics/global/en/tia-portal/controller-sw-tia-portal/pages/default.aspx.
53. Beresford Dillon. Exploiting siemens simatic S7 PLCs. Prepared for Black Hat USA+2011. Las Vegas, NV; 2011.
54. Offensive Security. 7-technologies IGSS 9.00.00.11059 multiple vulnerabilities [document from the Internet]; March 22, 2011. <> [cited September 1, 2012]. http://www.exploit-db.com/exploits/17024/.
55. Langil Joel, Byres Eric. Analysis of the 7-technologies IGSS security vulnerabilities for industrial control system professionals. Tofino Security, ; March 28, 2011. http://SCADAhacker.com.
56. Langil Joel. Exploitation 101: turning a SCADA vulnerability into a successful attack [document on the Internet]. <> [cited July 28, 2012]. http://www.scadahacker.com/videos/igss-video.html.
57. Gleg, Ltd. SCADA+ Pack [document from the Internet]. <> [cited September 4, 2012]. http://gleg.net/agora_scada.shtml.
58. ANSI C12.18-2006, Protocol specification for ANSI type 2 optical port. American National Standard Institute, Inc.; May 2, 2006.
59. ANSI C12.19-2008. American national standard for utility industry end device data tables. American National Standard Institute, Inc.; February 24, 2009.
60. Fisher Dennis. Termineter security framework for smart meters released. ThreatPost [document from the Internet]; July 20, 2012. <> [cited September 1, 2012]. http://threatpost.com/en_us/blogs/termineter-security-framework-smart-meters-released-072012.
61. Menn Joseph. Web-connected industrial controls stoke security fears. Reuters. San Francisco [document from the Internet]; July 22, 2012. <> [cited September 1, 2012]. http://in.reuters.com/article/2012/07/23/us-blackhat-industrialcontrols-idINBRE86M14R20120723.
62. Lagner Ralph. Forensics on a complex cyber attack-lessons learned from St****t. In Presentation at the 2011 applied control solutions (ACS) conference, September 20, Washington, DC; 2011.
63. SearchSecurity. Definition: blended threat [document from the Internet]. <> [Cited September 4, 2012]. http://searchsecurity.techtarget.com/definition/blended-threat.
64. Mlot Stephanie. Kaspersky uncovers new details of Flame malware [document on the Internet]; September 18, 2012. <> [cited September 18, 2012]. http://www.itproportal.com/2012/09/18/kaspersky-uncovers-new-details-of-flame-malware/#ixzz26pUY2u8P.
65. Kaspersky Labs. Virus news: Kaspersky lab experts provide in-depth analysis of flame's C&C infrastructure [document from the Internet]; June 4, 2012. <> [cited September 18, 2012]. http://www.kaspersky.com/about/news/virus/2012/Kaspersky_Lab_Experts_Provide_In_Depth_Analysis_of_Flames_Infrastructure.
66. Walter Jim Flame attacks: briefing and indicators of compromise May, 2012, McAfee Labs.
67. US-CERT. ICS-CERT advisory ICSA-12-201-01-OSISOFT PI OPC DA interface buffer overflow; July 19, 2012.
68. Shepard Daniel P, Humphreys Todd E, Fansler Aaron A. Evaluation of the vulnerability of phasor measurement units to GPS spoofing attacks, In Sixth annual IFIP WG 11.10 international conference on critical infrastructure protection. Washington, DC; March19-21, 2012.
69. Technical IEC Specification TS 62351-1. Power systems management and associated information exchange-data and communications security Part 1: Communication network and system security-Introduction to security issues. International Electrotechnical Commission (IEC): Geneva, Switzerland; 2007.
70. Goodin Dan. Many ways to break SSL with CRIME attacks, experts warn. ArsTechnica [document from the Internet]; September 17, 2012. <> [cited October 1, 2012]. http://arstechnica.com/security/2012/09/many-ways-to-break-ssl-with-crime-attacks-experts-warn/.
71. CVE-2009-355. Mitre. 2009 [document from the Internet]. <> [cited October 1, 2012]. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555.
72. Zetter Kim. Maker of Smart-Grid control software hacked. Wired [document on the Internet]; September 26, 2012. <> [cited September 27, 2012]. http://www.wired.com/threatlevel/2012/09/scada-vendor-telvent-hacked/.
73. OASyS SCADA: Standardized, centralized SCADA solutions from Telvent [document on the Internet]; 2012. <> [cited September 27, 2012]. http://www.telvent.com/en/business_areas/smart_grid/solutions_overview/smart_grid/smart_operations/oasys-scada.cfm.
74. Williams Diarmaid, Power Engineering International. European data watchdog puts spotlight on smart meters [document on the Internet]; July 2012. <> [cited July 2012]. http://www.powerengineeringint.com/articles/2012/07/european-data-watchdog-puts-spotlight-on-smart-meters.html.
75. Vijayan Jaikumar, Computer world. Energy department warns over Smart Grid privacy [document on the Internet]; October 2010. <> [cited July 2012]. http://www.computerworld.com/s/article/9191220/Energy_Department_warns_over_smart_grid_privacy.
76. Information Commissioner's Office, Key Definitions-guide to data protection [document on the Internet]; <> [cited July 2012]. http://www.ico.gov.uk/for_organisations/data_protection/the_guide/key_definitions.aspx.
77. Scott Mark, Bloomberg BusinessWeek. How Italy beat the world to a smarter grid [document on the Internet]; November 2009. <> [cited July 2012]. http://www.businessweek.com/globalbiz/content/nov2009/gb20091116_319929.htm.
78. "NISTIR 7628 Guidelines for smart grid cyber security: Vol. 2, Privacy and the smart grid [document on the Internet]; <> [cited July 2012]. http://csrc.nist.gov/publications/nistir/ir7628/nistir-7628_vol2.pdf.
79. Narciso Dean. The Columbus dispatch. Police seek utility data for homes of marijuana-growing suspects [document on the Internet]; February 2011. <> [cited July 2012]. http://www.dispatch.com/content/stories/local/2011/02/28/police-suspecting-home-pot-growing-get-power-use-data.html.
80. IT Law Wiki. Smart Grid privacy considerations. <> [cited July 2012]. http://itlaw.wikia.com/wiki/Smart_Grid_-_Privacy_Considerations#cite_note-5.
81. Sonia McNeill Harvard J Law Technol 2011, 25(1). Privacy and the modern grid [document on the Internet]; Fall 2011. [cited July 2012].
82. Information and Privacy Commissioner, Ontario, Canada. Smart privacy for the Smart Grid: embedding privacy into the design of electricity conservation [document on the Internet]; November 2009. <> [cited July 2012]. http://www.ipc.on.ca/images/resources/pbd-smartpriv-smartgrid.pdf.
83. Article 29 Data protection working party opinion on smart metering [document on the Internet]; December 2011. <> [cited August 2012]. http://idpc.gov.mt/dbfile.aspx/WP_183.pdf.
84. Fehrenbacher Katie. Gigaom. Big data meets the Smart Grid [document on the Internet]; August 2011. <> [cited August 2012]. http://gigaom.com/cleantech/big-data-meets-the-smart-grid/.
85. Duhigg Charles. NY Times. How companies learn your secrets [document on the Internet]; February 2012. <> [cited August 2012]. http://www.nytimes.com/2012/02/19/magazine/shopping-habits.html?pagewanted=1&_r=1&hp.
86. Wisniewski Chester. Naked security. Smart hacking for privacy [document on the Internet]; January 2012. <> [cited August 2012]. http://nakedsecurity.sophos.com/2012/01/08/28c3-smart-meter-hacking-can-disclose-which-tv-shows-and-movies-you-watch/.
87. Information Commissioner's Office. Privacy impact assessment handbook [document on the Internet]. <> [cited July 2012]. http://www.ico.gov.uk/upload/documents/pia_handbook_html_v2/html/1-Chap1-2.html.
88. Sodahead.com. Woman pulls gun to prevent smart meter installation [document on the Internet]; July 2012. <> [cited August 2012]. http://www.sodahead.com/united-states/woman-pulls-gun-to-prevent-smart-meter-installation/question-2816327/?page=5&postId=89495167#post_89495167.
89. Knapp Eric D. Industrial network security: securing critical infrastructure networks for smart grid, SCADA, and other industrial control systems. Massachusetts: Syngress; August 29, 2011.
90. The smart grid interoperability panel-cyber security working group. NISTIR 7628 guidelines for smart grid cyber security. Smart grid cyber security strategy, architecture, and high-level requirements, vol. 1. US Department of Commerce, National Institute of Standards and Technologies; August 2010.
91. M. Sa'Nchez Jime'Nez. Smart grid mandate M/490 EN: standardization mandate to european standardisation organisations (ESOs) to support European smart grid deployment. Brussels: European Commission Directorate-General for Energy; March 1, 2011.
92. CEN, CENELEC, ETSI. SGCG report on reference architecture for the smart grid external version V2.0. SGSC Reference Architecture Working Group (RAWG); August, 2012.
93. IEEE Standards Coordinating Committee 21. IEEE Standard 2030™-2011. IEEE guide for smart grid interoperability of energy technology and information technology operation with the electric power system (EPS), end-use applications, and loads. NY, USA: IEEE. September 10, 2011.
94. American National Standard ANSI/ISA-99.00.01-2007. Security for industrial automation and control systems, Part 1: Terminology, concepts, and models. NC: Research Triangle Park; October 2007.
95. Knapp Eric D. Industrial control systems cyber security proof of concept. Presented at the department of homeland security industrial control systems joint working group spring conference, Savannah, Georgia; May 9, 2012.
96. McAfee Labs McAfee threats report: second quarter 2012 2012, McAfee. Inc., Santa Clara, CA.
97. Kube Nate, Damisch Alexander. Mitigating industrial control systems vulnerabilities through intrusion detection systems/intrusion prevention systems signatures. In Department of homeland security industrial control systems joint working group spring conference. Georgia: Savannah; May 9, 2012.
98. Industrial Control System Cyber Emergency Response Team (ICS-CERT). Joint security awareness report JSAR-12-241-01B-Shamoon/disttrack malware. update B. US department of homeland security; October 16, 2012.
99. Neal Ungerleider. Fast Company. DHS: imported consumer tech contains hidden hacker attack tools [available on the Internet]; July 2011. <> [cited August 2012]. http://www.fastcompany.com/1765855/dhs-imported-consumer-tech-contains-hidden-hacker-attack-tools.
100. US Cyberspace Policy Review: assuring a trusted and resilient information and communications infrastructure [available on the Internet]. <> [cited August 2012]. http://www.whitehouse.gov/assets/documents/Cyberspace_Policy_Review_final.pdf.
101. Cabinet Office. Cyber security strategy of the united kingdom [available on the Internet]; June 2009. <> [cited August 2012]. http://webarchive.nationalarchives.gov.uk/+/http://www.cabinetoffice.gov.uk/media/216620/css0906.pdf.
102. US Resilience Project. Cyber supply chain risks, strategies and best practices [available on the Internet]. <> [cited August 2012]. http://www.usresilienceproject.org/workshop/participants/pdfs/USRP_Resources_Chapter_4_022812.pdf.
103. TechWeek Europe. Microsoft finds Nitol Botnet malware on PCs in chinese supply chain [available on the Internet]; September 14 2012. <> [cited September 2012]. http://www.techweekeurope.co.uk/news/nitol-botnet-microsoft-chinese-malware-security-cs-92741.
104. IEC/TR62443-2-3. Security for industrial automation and control systems [available on the Internet]; June 2012. <> [cited November 2012]. http://isa99.isa.org/Documents/Drafts/ISA-d62443-2-3.pdf.
105. Official Journal of the European Union. Directive 2009/72/ec of the European parliament and of the council of 13 July 2009 [available on the Internet]; July 2009. <> [cited August 2012]. http://www.energy.eu/directives/Directive_internal_electricity_market.pdf.
106. SC Magazine. California water company insider steals $9 million, flees country [available on the Internet]; May 2009. <> [cited August 2012]. http://www.scmagazine.com/California-water-company-insider-steals-9-million-flees-country/article/136923/?DCMP=EMC-SCUS_Newswire.
107. MaltaStar.com. Tampering with smart meters to pay 75% less [available on the Internet]; April 2012. <> [cited August 2012]. http://maltastar.com/dart/20120410-tampering-smart-meters-to-pay-75-less.
108. Washington Post. US, Israel developed flame computer virus to slow Iranian nuclear efforts, officials say [available on the Internet]; June 2012. <> [cited August 2012]. http://www.washingtonpost.com/world/national-security/us-israel-developed-computer-virus-to-slow-iranian-nuclear-efforts-officials-say/2012/06/19/gJQA6xBPoV_story_1.html.
109. Ofgem. About us [available on the Internet]. <> [cited August 2012]. http://www.ofgem.gov.uk/About%20us/Pages/AboutUsPage.aspx.
110. NetworkWorld.com. Dept. of energy wants electric utilities to create "cybersecurity governance board" [available on the Internet]; August 2012. <> [cited August 2012]. http://www.networkworld.com/news/2012/081012-dept-of-energy-wants-electric-261562.html?hpg1=bn.
111. NIST.gov. NIST identifies five "Foundational" Smart Grid standards [available on the Internet]; October 2010. <> [cited August 2012]. http://www.nist.gov/public_affairs/releases/smartgrid_100710.cfm.
112. North American Reliability Corporation (NERC). Critical infrastructure protection [available on the Internet]. <> [cited August 2012]. http://www.nerc.com/page.php?cid=6%7C69.
113. Department of Homeland Security. Cyber security procurement language for control systems [available on the Internet]; August 2008. <> [cited November 2012]. http://www.us-cert.gov/control_systems/pdf/SCADA_Procurement_DHS_Final_to_Issue_08-19-08.pdf.
114. NIST.gov. NIST framework and roadmap for Smart Grid interoperability standards, release 1.0 [available on the Internet]; January 2010. <> [cited August 2012]. http://www.nist.gov/public_affairs/releases/upload/smartgrid_interoperability_final.pdf.
115. Out-Law.com. Zurich fined £2.3m by FSA over loss of back-up tape [available on the Internet]; August 2010. <> [cited August 2012]. http://www.out-law.com/page-11333.
116. Homeland Security News Wire. Government contractors now required to have cybersecurity plans [available on the Internet]; January 2012. <> [cited August 2012]. http://www.homelandsecuritynewswire.com/srinfrastructure20120109-government-contractors-now-required-to-have-cybersecurity-plans.
117. CESG.gov.uk-The National Technical Authority for Information Assurance. Supplier information assurance assessment framework and guidance [available on the Internet]; January 2011. <> [cited August 2012]. http://www.cesg.gov.uk/publications/Documents/Fsupplier_ia_assessment_framework.pdf.
118. PCWorld.com. The 7 worst tech predictions of all time [Available on the Internet]; December 31 2008. <> [cited September 2012]. http://www.pcworld.com/article/155984/worst_tech_predictions.html.
119. About.com. Political jokes [Available on the Internet]. <> [cited September 2012]. http://politicalhumor.about.com/library/jokes/bljokebigbrotherpizza.htm.
120. World Economic Forum. Personal data: the emergence of a new asset class [Available on the Internet]; January 2011. <> [cited September 2012]. http://www3.weforum.org/docs/WEF_ITTC_PersonalDataNewAsset_Report_2011.pdf.
121. Stop smart meters UK [Available on the Internet]. <> [cited September 2012]. http://stopsmartmeters.org.uk/.
122. No to smart meters [Available on the Internet]. <> [cited September 2012]. http://nosmartmeters.org/.
123. The White House. Consumer data privacy in a networked world: a framework for protecting privacy and promoting innovation in the global digital economy [Available on the Internet]; February 2012. <> [cited September 2012]. http://www.whitehouse.gov/sites/default/files/privacy-final.pdf.
124. European Network Information Security Agency. Study on data collection and storage in the EU [Available on the Internet]; August 2012. <> [cited October 2012]. http://www.enisa.europa.eu/library/deliverables/data-collection/Fat_download/fullReport.
125. National conference of state legislatures. State security breach notification laws [Available on the Internet]; August 2012. <> [cited October 2012]. http://www.ncsl.org/issues-research/telecom/security-breach-notification-laws.aspx.
126. US-CERT. United states computer emergency readiness team [Available on the Internet]. <> [cited October 2012]. http://www.us-cert.gov/control_systems/ics-cert/.
127. United States Computer Emergency Readiness Team. Industrial control systems cyber emergency response team [Available on the Internet]. <> [cited November 2012]. http://www.us-cert.gov/control_systems/ics-cert/.
128. McAfee.com. Global energy cyber attacks: night dragon [Available on the Internet]; February 2011. <> [cited October 2012]. http://www.mcafee.com/resources/white-papers/wp-global-energy-cyberattacks-night-dragon.pdf.
129. McAfee.com. McAfee DeepSAFE [Available on the Internet]. <> [cited November 2012]. http://www.mcafee.com/uk/solutions/mcafee-deepsafe.aspx.
130. SOPHIA fingerprinting tool [Available on the Internet]. <> [cited November 2012]. http://sophiahome.inl.gov/.
131. The Smart Grid Interoperability Panel - Cyber Security Working Group. NISTIR 7628 guidelines for smart grid cyber security: Vol. 1, Smart Grid cyber security strategy, architecture, and high-level requirements. US Department of Commerce, National Institute of Standards and Technologies; August 2010.
132. CEN, CENELEC and ETSI. SGCG report on reference architecture for the Smart Grid external version V2.0. SGSC Reference Architecture Working Group (RAWG); August 2012.
133. Sorebo Gilbert N, Echols Michael C Smart Grid Security: an end-to-end view of security in the new electrical grid December 5, 2011, CRC Press, 328 pages. . 1st ed.
134. Knapp Eric D Industrial Network Security: Securing critical infrastructure networks for smart grid, SCADA, and other industrial control systems August 29, 2011, Syngress, 360 pages. . 1st ed.
135. Smart Grid: integrating renewable, distributed and efficient energy November 10, 2011, Academic Press, 568 pages. . 1st ed. F.P. Sioshansi (Ed.).
136. Macaulay Tyson, Singer Bryan L Cybersecurity for Industrial Control Systems: SCADA, DCS, PLC, HMI, and SIS December 13, 2011, Auerbach Publications, 203 pages. . 1st ed.
137. India power outage: 620million people affected by one of the world's biggest blackouts; July 2012. <> [cited October 2012]. http://www.huffingtonpost.com/2012/07/31/india-power-outage_n_1722356.html.
138. The Economic Times. Hackers can cripple India's power grids; August 2012. <> [cited October 2012]. http://articles.economictimes.indiatimes.com/2012-08-02/news/33001456_1_cyberattack-power-grids-blackout.