Gridtech 2019 presentation on infrastructure cyber security requirments for substation network

1. SECURED COMMUNICATION
INFRASTRUCTURE
1

2. • NERC CIP v5 Critical Infrastructure Protection
• IEEE 1686 functions and features to be provided in IEDs to accommodate
CIP
• IEC62351 power system data and communication security
• IETF standard for communication (eg: TLS, SSH)
Security Objectives
2Copyright © Kalkitech / ASE. All rights reserved.
Manage
MonitorProtect
• Confidentiality and integrity
– Engineering data
– SCADA data
• Defends against
– Intrusion
– Man in the middle
– Denial of service attacks
• Improve availability
• Centralized
• Authorization
• Authentication
• Accounting
• Logs
• Alarms
• Events

3. Security Standard Coverage
3

4. Cybersecurity Best Practices
4
Response
• Network management service
• Remote key and certificate
management process
• Patching, backup and recovery
Detection
•Audit trail
•Security events and alarm
logging
•Analysis tools
Protection
•Hardening
•Edge firewall
•Authentication
•digital signature & access
control
•Data encryption
•Validation

5. Enhanced Device Security
• Secured device access
• Controlling communication ports
• Encrypting of communication link and data
• Controlling firmware and configuration update
• Authenticating device access (RBAC)
• Logging of security alarms and events
5

6. Secure Substation Architecture
6

7. Thank You !
7