Michigan Tech researchers examine grid cybersecurity weaknesses

Published on February 16, 2017 by Daily Energy Insider Reports

Research exploring possible electrical grid hacking scenarios, recently published by Michigan Technological University scientists, found that a gap between physical equipment and software created the main cybersecurity vulnerability.

“Ten years ago, cybersecurity simply didn’t exist—it wasn’t talked about and it wasn’t a problem,” Chee-Wooi Ten, an associate professor of electrical and computer engineering at Michigan Tech and lead author
of the study, said. “Now with events like in Ukraine last year and malware like Stuxnet, where hackers can
plan for a cyberattack that can cause larger power outages, people are starting to grasp the severity of the problem.”

Smart technology such as smart meters and management systems provide improvements, but also opportunities for hackers, the researchers said. The researchers also found that the grid’s interconnectedness is a potential weakness that can cause problems such as blackouts and equipment failure.

Increased awareness of system weaknesses is critical for improving grid cybersecurity, according to the researchers. Ten suggested that better regulations based on those weaknesses and providing cybersecurity insurance would help.

“Simply because the remote substation networks are constantly commissioned with full compliance doesn’t mean they are secure,” Ten said. “There is going to be a tremendous impact if we’re negligent and fail to keep up with changes in communication infrastructure and emerging security threats.”