Skip to Main content Skip to Navigation
Conference papers

A Cyber Security Architecture for Microgrid Deployments

Abstract : Microgrids enable the aggregation of various types of generating and non-generating sources as a unified control unit. Microgrid control networks are connected to external networks - SCADA networks for demand-response applications, enterprise networks and the Internet for remote monitoring and control. These external connections expose microgrids to serious threats from cyber attacks. This is a major concern for microgrids at sensitive installations such as military bases and hospitals. One of the challenges in protecting microgrids is that control networks require very low latency. Cryptographic protection, which adds additional latency to communications, is unacceptable in real-time control, especially with regard to synchronization and stability. Also, a complex network at a microgrid site with interconnected control and SCADA networks makes the process of acquiring security certifications (e.g., DIACAP) extremely difficult. To address these challenges, this chapter presents the SNAPE cyber security architecture, which segregates communications networks needed for fast, real-time control from networks used for external control signals and monitoring, thereby drastically reducing the attack surface of a microgrid control network. Network segregation is achieved by hardware devices that provide strong cryptographic separation. The segregation isolates control networks so that they can use lightweight cryptography to meet the low latency requirements. The novel approach minimizes the cyber security certification burden by reducing the scope of certification to a subset of a microgrid network.
Document type :
Conference papers
Complete list of metadata

Cited literature [11 references]  Display  Hide  Download

https://hal.inria.fr/hal-01431005
Contributor : Hal Ifip <>
Submitted on : Tuesday, January 10, 2017 - 2:56:04 PM
Last modification on : Wednesday, January 11, 2017 - 4:03:39 PM
Long-term archiving on: : Tuesday, April 11, 2017 - 3:19:14 PM

File

978-3-319-26567-4_15_Chapter.p...
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Apurva Mohan, Gregory Brainard, Himanshu Khurana, Scott Fischer. A Cyber Security Architecture for Microgrid Deployments. 9th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2015, Arlington, VA, United States. pp.245-259, ⟨10.1007/978-3-319-26567-4_15⟩. ⟨hal-01431005⟩

Share

Metrics

Record views

716

Files downloads

512