IEEE Consumer Electronics Magazine - January/February 2022 - 36

Smart Grid
A number of agencies and organizations such
Figure 2. Example concept of a flexible and agile
platform able to adapt to diversifying and expanding
threats to power system operation.
operations, and offer just-in-time and postevent
intelligence that would aid optimally and
securely utilities and smart cities units restoration
and recovery management processes, i.e.,
minimizing downtime, operational risks, further
exposure to vulnerability, and cost incurred due
to the event. Such platforms will need to encompass
bulk power systems and distribution
feeder-level control, self-contained community
microgrid formation with multiple points of common
coupling to the surrounding distribution
grid, support integration of a fleet of multiple PV
systems (able to provide power to critical loads
during grid outages), and behind-the-meter
resources and customer-owned RES and storage.
The development of both planning-based
and operation-based platforms supporting RES
inclusion requires not only the incorporation
of resilience enhancement strategies, but also
needs to encompass cybersecurity practices
and standards able to mitigate growing threats.
Existing approaches to mitigate attacks mainly
focus on two aspects: (1) resilience control
and estimation strategies by excluding the
attacked part and adapting optimized control
and estimation strategies under attacks, and
(2) attack detection by monitoring unexpected
changes in the measured system variables.
Attack detection approaches are further classified
into two main categories: pattern recognition,
i.e., learn the recorded historical data
corresponding to attacks and then recognize
the class of real-time data, and anomaly detection,
i.e., compare the real-time behavior of the
system with the expected normal behavior.
36
as the National Institute of Standards and Technology
(NIST), the International Organization for
Standardization (ISO), and other standards bodies
are working together along with the research
community to understand new cybersecurity
threats, how to create a base set of controls to
manage them, understand the risks they pose,
and how to mitigate those risks.14 NIST created
NIST SP 800-8215 to aid in the implementation of
cybersecurity measures in industrial control systems.
Also, NIST created two interagency reports
on Internet-of-Things (IoT) devices, IoT device
cybersecurity capability core baseline (NISTIR
8259 A), and considerations for managing IoT
cybersecurity and privacy risks (NISTIR 8228). In
addition, utility regulations have cybersecurity
requirements and standards. The North Atlantic
Electric Reliability Corporation (NERC) published
the NERC CIP v5 Cyber Security Standards.
The private sector, and specifically natural
gas and oil companies,16 utilize NIST's cybersecurity
frameworks and additional international
cybersecurity standards including ISA/IEC
62 443 series on industrial automation and control
systems security, and the Department of
Energy (DOE) Cybersecurity Capability Maturity
Model (C2M2). Other efforts include NIST's
National Cybersecurity Center of Excellence
(NCCoE), which works with various critical infrastructure
sectors such as electrical utilities and
technology collaborators to explore the status
of cybersecurity concerns that may arise from
distributed RES cyberinterconnections,17 and
develops reference architectures to address
these vulnerabilities.18 Example areas of concern
are malware protection and detection, data
integrity, device and data authenticity.
Based on security requirements/outcomes of
different attack/concern scenarios and standards/best-practices,
cybersecurity capabilities
need to include analysis and visualization,
authentication and access control, behavioral
monitoring, command registers and data historians,
data integrity, and malware detection.1921
Figure 3 shows how the desired cybersecurity
capabilities may be deployed to protect not only
utility systems and distributed RES, but also
microgrid and behind-the-meter resources and
loads.18
IEEE Consumer Electronics Magazine
IEEE Consumer Electronics Magazine - January/February 2022

Table of Contents for the Digital Edition of IEEE Consumer Electronics Magazine - January/February 2022
