Emerging IoT in the Energy Sector

Copyright ©2017 OMNETRIC Group. All rights reserved. OMNETRIC Group Unrestricted information. 1
Presentation title
Emerging IoT in the Energy
Sector
Where we’ve been and where we are going
EMCSF June 2017

OMNETRIC Group
We are transformation architects
We are focused on the energy
industry and dedicated to our
customers’ energy journey over the
long term. Our talent, tools,
accelerators and methodologies, our
adapters and proprietary solutions,
R&D and thought leadership are all
focused on solving the integration
challenges of our utilities
customers.
We understand the mandate to
transform and the business
imperatives, but equally, the
inherent risks and costs. This
enables us to propose real world
ready solutions that can be
implemented reliably at speed.
We live and breathe
IT/OT integration
We approach integration
with a deep understanding
of the operations side of the
IT/OT equation
We can offer ready-made
solution assets to the
market
We combine privileged
access to the world class
assets of our shareholders
with the agility of a start-up
We make the upfront investments
required to bring ready-made
solutions to our customers so that
they can solve their challenges
faster and more reliably with less
risk.
Our customers benefit from the
products, global footprint and
financial backing of our
shareholders as well as a privileged
relationship with their ecosystem
partners.

Why are we worrying about
security?

Seven 110kV and twenty-
three 35kV substations
across three DSOs had
breakers opened
225,000 premises were
without power for 4-6
hours
Serial-to-IP converters were
permanently destroyed by
rogue firmware
Multiple control PCs disks
were wiped using Killdisk
HR system disabled
Loss of AMI
connectivity
DSO restricted to manual operations
UPS changes killed power
to data centre
DOS attack against call centre
Ukraine – December 2015
4

IT/OT integration is an evolution that is
applied step-by-step
We can apply the same thinking for security and trust
FlyJumpRunWalkCrawl

Circuit based solutions
Circuit based solutions
• Serial cable
• PSTN
• Mobile modem
Getting old
• Expensive to implement and maintain
• Not highly scalable
Communications technology
Assessment
• Establishing trust – hope the engineer gets it right
• Level of trust – minimal. Hard to prove end-point and relatively easy to intercept
• Management – poor. Passwords often unchanged for years and even when transferred
• High scale – extremely difficult, especially where communications infrastructure needed
Challenges
Control system Field deviceCircuit

Virtual Private Networks
Communications technology Challenges
IP Based connections with a virtual circuit at OSI layer 2/3 • Expensive to implement and maintain
• Not highly scalable
• Secure pipe – but gaps at the end
Assessment
• Establishing trust – engineer probably gets it right but no end-to-end
• Level of trust – connection okay – but gaps at either end
• Management – hard at large scale
• High scale – difficult and very expensive
Control system Field deviceVirtual circuit
VPN
server
VPN
Client

Symmetric keys – shared secret
• IP Based connections with a secure connection at OSI
Layer 6
• Trust via symmetric keys
• Key handling
• Breach of key store breaches all devices
• Needs capable devices with crypto processors
• Only supports 1:1 relationship
Assessment
• Establishing trust – shared secret can be installed by the manufacturer. Needs to be installed in the right place
• Level of trust – very high. Symmetric crypto is tough to crack. Relationship to the end device
• Management – can handle very large scale but needs very robust processes
• High scale – much more scalable but hard to control keys
Control system Field deviceTLS or Message Based
Key
store
Crypto

Asymmetric keys – Public Key Infrastructure
• IP Based connections with a secure connection at OSI
Layer 6
• Trust via asymmetric keys
• Public Key Infrastructure – Root and signing servers
• Breach of key store breaches trust
• Needs capable devices with crypto processors
• Supports many to many relationship
• Certificate handling & revocation problematic
Assessment
• Establishing trust – public certificates can be provided by the manufacturer. Needs to be installed in the right place
• Level of trust – very high. Generally needs combination of asymmetric and symmetric for processing
• Management – can handle extremely large scale but needs very robust processes for certificate handling
• High scale – known to work at extreme scale but hard to recover trust
Control system Field deviceTLS or Message Based
Key
store
Crypto
PKI Cert mgt
Cert mgt
Cert mgt
Cert mgt

Where next?

Smart grid solution security in context
Risk management & security governance
Protectiontechnology
Security processes and procedures
Cryptography management Monitoring and intrusion detection
Enhance
d
security
offeringBasic security measures
Core solution
Core
solution
offering
Incidentresponseand
recovery

OMNETRIC Group is dedicated to the global delivery of
integrated information technology and operational
technology solutions and services, helping utility
companies to achieve greater grid reliability and
efficiency. OMNETRIC Group can support clients with
innovative solutions wherever they may be on their path
to a smarter grid. For more information, visit
www.omnetricgroup.com.
For more information contact:
Jon Longstaff CISSP
Head of Cyber Security
jon.longstaff@omnetric.com
@DefendtheGrid
Engineers
IT
experts
Data
scientists
Cybersecurity
specialists

Emerging IoT in the Energy Sector

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Emerging IoT in the Energy Sector

Similar to Emerging IoT in the Energy Sector (20)

More from East Midlands Cyber Security Forum

More from East Midlands Cyber Security Forum (7)

Recently uploaded

Recently uploaded (20)

Emerging IoT in the Energy Sector