Smart grid security: An end-to-end view of security in the new electrical grid

Smart Grid Security: An End-to-End View of Security in the New Electrical Grid

Volumn , Issue , 2011, Pages 1-280

  Sorebo, Gilbert N ^a   Echols, Michael C ^b  

^a CATHOLIC UNIVERSITY OF AMERICA   (United States)

^b UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85096253518     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1201/b11300     Document Type: Book

References (98)

1. 2-Day Training, April 26–27, 2011:
2. Power Analysis Attacks and Countermeasures for AT Defense Applications. Cryptography Research, 2011, retrieved from http://www.cryptography.com/newsevents/press_releases/2011/03/18/workshop-20110426-27.html.
3. About APS – Power Plants. APS, retrieved from http://www.aps.com/general_info/aboutAPS_18.html.
4. Archer, Christina L. and Mark Z. Jacobson. Supplying baseload power and reducing transmission requirements by interconnecting wind farms. Journal of Applied Meteorology and Climatology, November 2007, pp. 1701–1717, retrieved from http://www.stanford.edu/group/efmh/winds/aj07_jamc.pdf.
5. ARRA of 2009 Related to Western. Western Area Power Administration, http://www.wapa.gov/recovery/default.htm.
6. Barker, Elaine, William Barker, William Burr, William Polk, and Miles Smid, Recommendation for Key Management, NIST Special Publication 800-57, March 2007, retrieved from http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57-Part1-revised2_Mar08-2007.pdf.
7. Bartley, William H., Life Cycle Management of Utility Transformer Assets, The Hartford Steam Bender, Klaus, No Health Threat from Smart Meters, Utilities Telecom Council, retrieved from http://www.smartgridnews.com/artman/uploads/1/NoSmartMeterHealthThreat_1_pdf.
8. Boiler Inspection and Insurance Company, 2002, retrieved from http://www.bplglobal.net/eng/knowledge-center/download.aspx?id=196.
9. Bonneville Power Administration website, retrieved from http://www.bpa.gov.
10. Burn Plus Wet Scrubber for Exhaust Gas Cleaning. Crystec Technology Trading GmbH, retrieved from http://www.crystec.com/ksiburne.htm.
11. Capacity and Energy Emergencies. Standard EOP-002-3, NERC, retrieved from http://www.nerc.com/files/EOP-002-3.pdf.
12. Chowdhury, S., S.P. Chowdhury, and P. Crossley, Microgrids and Active Distribution Networks. The Institution of Engineering and Technology (London), 2009.
13. Clarke, Richard and Robert Knake, Cyber War: The Next Threat to National Security and What to Do About It, Ecco (New York), 2010.
14. Critical Cyber Asset Identification, Standard CIP-002-3, Cyber Security, NERC, retrieved from http://www.nerc.com/files/CIP-002-3.pdf.
15. Daniels, A. and W. Salter, What is SCADA? In the Proceedings of 7th International Conference on Accelerator and Large Experimental Physics Control Systems (ICALEPCS 99), Trieste, Italy, October 4–8, 1999, pp. 339–343.
16. Dhameja, Sandeep, Electric Vehicle Battery Systems. Newnes (Boston) 2002.
17. Directory: Cents per Kilowatt-Hour. Pure Energy Systems, April 13, 2011, retrieved from http://peswiki.com/index.php/Directory:Cents_Per_Kilowatt-Hour.
18. DPA Countermeasures. Cryptography Research, 2011, retrieved from http://www.cryptography.com/technology/dpa.html.
19. Du, Yangbo and John E. Parsons, Update on the Cost of Nuclear Power. Center for Energy and Environmental Policy Research, May 2009, retrieved from http://web.mit.edu/ceepr/www/publications/workingpapers/2009-004.pdf.
20. Edge Node 7000 Series. Echelon, 2011, retrieved from http://www.echelon.com/metering/ecn.htm.
21. Electric Power Research Institute, Electricity Sector Framework for the Future, Volume I: Achieving the 21st Century Transformation, Electric Power Research Institute (Washington, DC), 2003.
22. Electricity Basic Statistics – 100 Largest Electric Plants. U.S. Energy Information Administration, June 2010, retrieved from http://www.eia.doe.gov/neic/rankings/plantsbycapacity.htm.
23. Electricity Grid Modernization: Progress Being Made on Cyber Security Guidelines, but Key Challenges Remain to Be Addressed, GAO-11-117, Government Accountability Office, January 2011, retrieved from http://www.gao.gov/new.items/d11117.pdf.
24. Energy Policy Act (102nd Congress H.R.776.ENR).
25. Evans, James W., The Interface between Automation and the Substation, in Electric Power Substations Engineering, Chapter 6, pp. 1–20, edited by John D. McDonald, CRC Press (Boca Raton, FL), 2003.
26. Fact Sheet on Nuclear Insurance and Disaster Relief Funds. U.S. Nuclear Regulatory Commission, retrieved from http://www.nrc.gov/reading-rm/doc-collections/fact-sheets/funds-fs.html.
27. Falliere, Nicholas, Liam O. Murchu, and Eric Chien, W32.Stuxnet Dossier, Symantec Security Response, Version 1.4, February 2011, retrieved from http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_stuxnet_dossier.pdf.
28. Federal Energy Management Program Using Distributed Energy Resources, A How-To Guide for Federal Facility Managers, DOE/GO-102002-1520, U.S. Department of Energy by the National Renewable Energy Laboratory, May 2002.
29. Fehrenbacher, Katie, 5 Energy Storage Players That Won Smart Grid Stimulus Funds. Gigom, November 24, 2009, retrieved from http://gigaom.com/cleantech/5-energy-storage-players-that-won-smart-grid-stimulus-funds/.
30. Fehrenbacher, Katie, Lesson Learned from the PGandE Smart Meter Suit: It’s a Communication Problem. GigaOM, November 19, 2009, retrieved from http://gigaom.com/cleantech/lesson-learned-from-the-pge-smart-meter-suit-its-a-communication-problem/.
31. Fehrenbacher, Katie, Smart Meter Backlash, Again: This Time in Texas. GigaOM, March 10, 2010, retrieved from http://gigaom.com/cleantech/smart-meter-backlash-again-this-time-in-texas/.
32. Flick, Tony and Justin Morehouse, Securing the Smart Grid: Next Generation Power Grid Security, Syngress (Burlington, MA), 2011.
33. Gabriel, Mark A., Visions for a Sustainable Energy Future. Fairmont Press (Lilburn, GA), 2008.
34. Glossary of Terms Used in Reliability Standards. NERC, April 20, 2009, retrieved from http://www.nerc.com/files/Glossary_2009April20.pdf.
35. Glossary of Terms Used in Reliability Standards. NERC, February 12, 2008, retrieved from http://www.nerc.com/files/Glossary_12Feb08.pdf.
36. Gorman, Siobhan, Electricity Grid in U.S. Penetrated by Spies. Wall Street Journal, April 8, 2009, retrieved from http://online.wsj.com/article/SB123914805204099085.html.
37. Herold, Rebecca, Privacy Challenges of the Smart Power Grid. Rebecca Herold and Associates, LLC, 2011.
38. HomePlug AV standard. RF Design, August 2006, pp. 16–26, retrieved from http://rfdesign.com/mag/608RFDF1.pdf.
39. Husain, Iqbal, Electric and Hybrid Vehicles: Design Fundamentals, 2nd ed., CRC Press (Boca Raton, FL), 2011.
40. Ice Bear Energy Storage System. Ice Bear Energy Storage, retrieved from http://www.ice-energy.com/ice-bear-energy-storage-system.
41. IEC 60870-6-503, Part 6-503, Telecontrol Protocols Compatible with ISO Standards and ITU-T Recommendations: TASE.2 Services and Protocol, 2nd edition, 2002–2004.
42. Fries, Steffen, Hans Joachim Hof, and Maik Seewald, Enhancing IEC 62351 to Improve Security for Energy Automation in Smart Grid Environments, 2010 Fifth International Conference on Internet and Web Applications and Services, IEEE, 2010, pp. 135–142.
43. IEC 61968, Part 1, Interface Architecture and General Requirements, International Electrotechnical Commission, 2003.
44. IEC 61970, Energy Management System Application Program Interface (EMS-API), Part 301: Common Information Model (CIM) Base, International Electrotechnical Commission, 2009.
45. IEC 62351, Parts 1–8, Information Security for Power System Control Operations, International Electrotechnical Commission, 2006–2008.
46. Kanellos, Michael, Can a Country Get 90 Percent of Its Power From Renewables? Wired, April 3, 2011, retrieved from http://www.wired.com/epicenter/2011/04/country-90pct-renewables/.
47. Katar, Srinivas, et.al. Harnessing the potential of powerline communications using the Homeland Security Presidential Directive/HSPD-7, The White House, December 17, 2003, retrieved from http://www.fas.org/irp/offdocs/nspd/hspd-7.html.
48. Kuhn, D. Richard, Vincent C. Hu, W. Timothy Polk, and Shu-Jen Chang, Introduction to Public Key Technology and the Federal PKI Infrastructure, NIST Special Publication 800-32, February 26, 2011, retrieved from http://csrc.nist.gov/publications/nistpubs/800-32/sp800-32.pdf.
49. Kuphaldt, R., Lessons in Electric Circuits. Volume IV (Digital), January 18, 2006, retrieved from http://www.ibiblio.org/kuphaldt/electricCircuits/Digital/index.html.
50. LaMonica, Martin, PGandE admits to flaws in some smart meters, CNet News, May 11, 2010, retrieved from http://news.cnet.com/8301-11128_3-20004645-54.html.
51. LaMonica, Martin, Start-up GridGlo taps smart-meter data deluge. CNet News, May 11, 2011, retrieved from http://news.cnet.com/8301-11128_3-20061749-54.html?part=rssandsubj=newsandtag=2547-1_3-0-20.
52. LAN/MAN Standards Committee of the IEEE Computer Society, Part 15.4: Wireless Medium Access Control (MAC) and Physical Layer (PHY) Specifications for Low-Rate Wireless Personal Area Networks (WPANs), IEEE-SA Standards Board, June 2006, retrieved from http://standards.ieee.org/getieee802/download/802.15.4-2006.pdf.
53. Layton, Lyndsey, Reliance on Coal Sullies “Green the Capitol” Effort. Washington Post, April 27, retrieved from http://www.washingtonpost.com/wp-dyn/content/article/2007/04/20/AR2007042002128.html.
54. Letendre, Steven, Denholm, Paul, Lilienthal, Peter, Electric and Hybrid Cars, New Load or New Resource? Public Utilities Fortnightly, December 2006, pp. 28–37.
55. Majdalawieh, Munir, DNPSec: Distributed Network Protocol Version 3 (DNP3) Security Framework, December 19, 2005, retrieved from http://www.acsac.org/2005/techblitz/majdalawieh.pdf.
56. McAfee Foundstone Professional Services and McAfee Labs, Global Energy Cyberattacks: Night Dragon, McAfee, February 10, 2011, retrieved from http://www.mcafee.com/us/resources/white-papers/wp-global-energy-cyberattacks-night-dragon.pdf.
57. ® Distribution Connectivity Model and the IEC Common Information Model Network Data Set, 2008, retrieved from http://www.multispeak.org/documents/MultiSpeak_and_CIM_DIstributech_2008_article.pdf.
58. MODBUS Protocol, Modbus Organization, Inc., 2011, retrieved from http://www.modbus.org/specs.php.
59. Montenegro, G., N. Kushalnagar, J. Hui, and D. Culler, Transmission of IPv6 Packets over IEEE 802.15.4 Networks, September 2007, retrieved from http://tools.ietf.org/html/rfc4944.
60. Morioka, Matthew, Alireza Abrishamkar, and Yve Kay, Three Gorges Dam, retrieved from http://www.eng.hawaii.edu/~panos/444_09_4_9.pdf.
61. The Need for Essential Consumer Protections: Smart Metering Proposals and the Move to Time-Based Pricing, AARP, National Consumer Law Center, National Association of State Utility Consumer Advocates, Consumers Union, and Public Citizen, August 2010, retrieved from http://www.nclc.org/images/pdf/energy_utility_telecom/additional_resources/adv_meter_protection_report.pdf.
62. The NETL Smart Grid Implementation Strategy (SGIS). National Energy Technology Laboratory, 2011, retrieved from http://www.netl.doe.gov/smartgrid/.
63. Newborough, M. and P. Augood, Demand-side management opportunities for the UK domestic sector, IEE Proceedings of Generation Transmission and Distribution, 146 (3) (1999), pp. 283–293.
64. NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 1.0, NIST Special Publication 1108, January 2010, retrieved from http://collaborate.nist.gov/twiki-sggrid/pub/SmartGrid/IKBFramework/NISTFrameworkAndRoadmapForSmartGridInteroperability_Release1final.pdf.
65. No Name Key – In the News. retrieved from http://www.nonamekey.org/nnknews.html.
66. North American Electric Reliability Corporation, retrieved from http://www.nerc.com/.
67. Nuqui, Reynaldo Francisco, State Estimation and Voltage Security Monitoring Using Synchronized Phasor Measurements, dissertation submitted to the Faculty of the Virginia Polytechnic Institute and State University, July 2, 2001 (Blacksburg, VA), retrieved from http://scholar.lib.vt.edu/theses/available/etd-07122001-030152/unrestricted/rnuqui_dissertation.pdf.
68. Paris, Demetrius and F. Kenneth Hurd, Basic Electromagnetic Theory, McGraw-Hill (New York), 1969.
69. Plug-In Hybrid Electric Vehicle RandD Plan, U.S. Department of Energy, retrieved from http://www1.eere.energy.gov/vehiclesandfules/pdfs/program/phev_rd_plan_02-28-07.pdf.
70. Rexford, Kenneth B., Peter R. Giuliani, and Leo Chartrand, Electrical Control for Machines, Sixth edition, Delmar Cengage Learning, 2002.
71. San Diego Gas and Electric Company Schedule Statin Power Self-Supply (SPSS), Feb. 4, 2010, retrieved from http://www.sdge.com/tm2/pdf/ELEC_ELEC-SCHEDS_SPSS.pdf.
72. Ristenpart, Thomas, Eran Tromer, Hovav Shacham, and Stefan Savage, Hey, you, get off of my cloud: Exploring information leakage in third-party compute clouds. Proceedings of CCS 2009, ACM Press, November 2009, pp. 199–212.
73. Schneier, Bruce, The Psychology of Security. January 18, 2008, retrieved from http://www.schneier.com/essay-155.html.
74. Security Profile for Distribution Management, Version 0.12, The Advanced Security Acceleration Project for the Smart Grid (ASAP-SG), August 16, 2010, retrieved from http://www.smartgridipedia.org/images/1/1b/DM_Security_Profile_-_v0_12_-_20100816.pdf.
75. Taum Sauk Pumped Storage Project (No. P-2277), Dam Breach Incident. FERC, June 28, 2010, retrieved from http://www.ferc.gov/industries/hydropower/safety/projects/taum-sauk.asp.
76. Technical Conference on Smart Grid Interoperability Standards (RM11-2-000) (Washington, DC), FERC, January 31, 2011 (submitted testimony), retrieved from http://ferc.gov/EventCalendar/EventDetails.aspx?ID=5571andCalType=%20andCalendarID=116andDate=01/31/2011andView=Listview.
77. Smart Grid Interoperability Panel – Cyber Security Working Group Standards Review, Phase 1 Report, October 7, 2010, found at http://collaborate.nist.gov/twiki-sggrid/pub/SmartGrid/CSCTGStandards/StandardsReviewPhase-1Report.pdf.
78. Southeastern Power Administration website, retrieved from http://www.sepa.doe.gov/.
79. Southwestern Power Administration website, retrieved from http://www.swpa.gov/.
80. Stajnarová, Monica, Data privacy and security in smart meters: How to face this challenge? Workshop on Regulatory Aspects of Data Transmission, Data Security and Data Protection in Relation to Smart Metering, Florence, November 26, 2010, pp. 9-10, retrieved from http://www.florence-school.eu/portal/page/portal/FSR_HOME/ENERGY/Policy_Events/Workshops/2010/Smart_Metering/Presentation_Stanjarova.pdf.
81. Standard BAL-002-1 – Disturbance Control Performance. NERC, August 5, 2010 retrieved from http://www.nerc.com/files/BAL-002-WECC-1.pdf.
82. Standard EOP-001-0 – Emergency Operations Planning. NERC, April 1, 2005, retrieved from http://www.nerc.com/files/EOP-001-0.pdf.
83. State Security Breach Notification Laws. National Conference of State Legislatures, October 12, 2010, retrieved from http://www.ncsl.org/default.aspx?tabid=13489.
84. TransFlow 2000: Lowest Cost Utility-scale Energy Storage. Premium Power, retrieved from http://www.premiumpower.com/product/transflow2000.php.
85. Transmission Vegetation Management Program, Standard FAC-003-1, NERC, retrieved from http://www.nerc.com/files/FAC-003-1.pdf.
86. ® International Users Group, version 2.0, August 30, 2010, retrieved from http://osgug.ucaiug.org/sgsystems/openhan/Shared%20Documents/OpenHAN%202.0/UCAIug%20HAN%20SRS%20-%20v2.0.pdf.
87. United States of America Federal Energy Regulatory Commission, 18 CFR Part 35, Docket No. RM99-2-000; Order No. 2000, Regional Transmission Organizations. December 20, 1999.
88. Energy Provisions in the American Recovery and Reinvestment Act of 2009 (P.L. 111-5), March 3, 2009.
89. Useful Thermal Output by Energy Source by Combined Heat and Power Producers. U.S. Energy Information Administration, April 2011, retrieved from http://www.eia.doe.gov/cneaf/electricity/epa/epat2p2.html.
90. Watertown Operations Center. Western Area Power Administration, retrieved from http://www.wapa.gov/newsroom/WTbrochure.htm.
91. Western Area Power Administration website, retrieved from http://www.wapa.gov.
92. Wang, Shimo and George Rodriguez, Smart RAS (Remedial Action Scheme), Southern California Edison (SCE), retrieved from http://asset.sce.com/Documents/Environment%20-%20Smart%20Grid/SmartRemedialActionScheme.pdf.
93. What FERC Does. FERC, retrieved from http://www.ferc.gov/about/ferc-does.asp.
94. What is Google PowerMeter? Google, 2011, retrieved from http://www.google.com/powermeter/about/about.html.
95. What is TED? Energy, Inc., 2010, retrieved from http://www.theenergydetective.com/about-ted.
96. Wright, Joshua, KillerBee: Practical ZigBee Exploitation Framework or “Wireless Hacking and the Kinetic World.” retrieved from http://www.willhackforsushi.com/presentations/toorcon11-wright.pdf.
97. ® Membership, Designations and Logos Policy. ZigBee Alliance, January 27, 2009, retrieved from http://www.zigbee.org/imwp/idms/popups/pop_download.asp?ContentID=6700.
98. ZigBee Smart Energy Profile Specification, ZigBee Alliance, December 1, 2008, retrieved from http://zigbee.org/Standards/ZigBeeSmartEnergy/PublicApplicationProfile.aspx.