Monday, 14 May 2018

Week 6 [14.05 - 20.05.2018] Modelling for Improved Cyber Security in Smart Distribution System

Hi all,
Today I would like to present an article about cyber security in smart distribution systems.
http://www.ijfrcsce.org/download/browse/Volume_4/February_18_Volume_4_Issue_2/1518591980_14-02-2018.pdf
Smart distribution systems are part of our life, even though we are not interacting with them directly. Electric power distribution systems are a good example of such system. Creating efficient system, resistant to extreme events, like water floods, blizzards and so on is crucial. However, increasing protection from natural disasters isn't the hardest part. Nowadays, cyber security is as important. It's easier to hack into the power grid and disable electric power in whole city or country.
Few questions:
1. Can you give an example of the smart distribution system (excl. electric, water)?
2. Have you heard about attacks on smart distribution systems?
3. Do you think IoT can improve the reliability of such systems?

32 comments:

  1. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    Nothing comes to my ming right now.

    2. Have you heard about attacks on smart distribution systems?

    I have never heard about them, but I can list potential ones:
    -A malicious actor conducts a cyber-attack on a smart water treatment facility to prevent proper functionality, endangering the systems and public health.
    -A malicious actor gains remote access to a smart wastewater facility to cause water system backups and potential environmental damage.
    -A malicious actor remotely attacks smart water distribution systems to damage system components, disable system sensors, disrupt storage and flows, or distribute contaminated water.
    -A malicious actor disrupts storm water-management systems during severe weather to create unsafe conditions, strain storm water-management systems, and compound the consequences of inclement weather.
    -A malicious actor targets smart pumps, valves, and other components in smart water-storage facility control systems to manipulate water flow.

    3. Do you think IoT can improve the reliability of such systems?

    To make the smart grid system more reliable and stable, security is the major issue to be provided with the main technologies. I guess IoT my help.

    ReplyDelete
    Replies
    1. -A malicious actor disrupts storm water-management systems during severe weather to create unsafe conditions, strain storm water-management systems, and compound the consequences of inclement weather.

      This one can be dangerous after winter someone can create artificial floods.

      Delete
  2. Thank you for an interesting article. The conventional power grid along with population growth and global industrialization reaches the limits of its capabilities, which increases the probability of failure in peak load hours. In addition, in this type of network there are difficulties in receiving energy from variable power sources such as wind and solar energy. As the power delivered to the network from these sources increases, their integration into the network becomes more and more difficult. As a consequence, there is a need to develop a power system with high reliability, self-regulation capacity and energy-efficient, which will enable the integration of distributed generation from renewable sources. Smart grid systems are a good example. Due to the fact that access to energy in current times is of strategic importance, such incidents are hidden. In response to your third question, I have also heard about intelligent meal transport systems in hospital.

    ReplyDelete
    Replies
    1. Transporting meals and pills are quite advanced in certain hospitals. Even in Poland I've seen hospitals with such systems.

      Delete
  3. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    So next thing will be gas smart distribution :D.
    2. Have you heard about attacks on smart distribution systems?
    Nope, never.
    3. Do you think IoT can improve the reliability of such systems?
    I think that IoT can improve reliability of this systems, but I don't thnik that it can improve security of it.

    ReplyDelete
  4. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    2. Have you heard about attacks on smart distribution systems?
    3. Do you think IoT can improve the reliability of such systems?
    I admit that the topic is quite strange to me. But I have heard about such attacks, on dams, on power plants, etc.

    ReplyDelete
  5. 1) Can you give an example of the smart distribution system (excl. electric, water)?

    Hello, in my opinion the most known system of intelligent distribution is the e-Lerning content distribution system. Everyone knows these systems in earlier times ... even this English course is one of the examples of the e-Lerning system!

    2) Have you heard about attacks on smart distribution systems?

    Recently, hackers have intensified attacks on energy infrastructure, and the group named Dragonfly is the leader. This isn't the first example of activities carried out by Dragonfly. The Group has been operating for a long time, and in 2010-2014 they was responsible for a number of attacks on American and European energy systems. Last year, the FBI and the Department of Homeland Security established that Dragonfly is associated with Russian hackers. The current wave of attacks began in December 2015 and their target is employees of power plants. Hackers tried to get logins and system passwords to install backdoors.

    3) Do you think IoT can improve the reliability of such systems?

    It's hard to say, but I think so. Such systems will certainly improve the quality of distribution systems. It isn't known, but in which direction they will have to evaluate.

    ReplyDelete
    Replies
    1. Thank you for a good example of the attacks. Especially, Dragonfly.

      Delete
  6. Ad1.
    An example is a traffic control system in a city to minimize the number of traffic jams in the city. Moreover, there are no production companies today whose production process is not controlled by algorithms. The lack of the use of such algorithms causes huge losses.
    Ad2.
    Such attacks have been carried out for a long time. An example from Poland. There is a train control system in Poland. With the use of an appropriate signal, it is possible to stop the entire train movement within a radius of several kilometres. In addition, smooth-running traffic at level crossings is blocked, because the barriers remain closed.
    Ad3.
    This is probably possible.

    ReplyDelete
  7. 1. Can you give an example of the smart distribution system (excl. Electric, water)?

    Of course, I could give an example of an intelligent distribution system outside the electrical and water systems. Such a system works, for example, in chemical and food production, for example for automatic classification of substances and mixtures, the electronic process of verification and approval of product company safety data sheets or their automatic distribution and publication for customers and in many other cases.

    2. Have you heard about attacks on smart distribution systems?

    Yes, I heard, but these were attacks by foreign intelligence service hackers, for the assault of US hackers from the CIA on hydroelectric systems in Russia. Such attacks take place almost every day, however, these are only minor attempts by the forces of competing States.

    3. Do you think IoT can improve the reliability of such systems?

    They could improve their reliability, of course, but you have to reckon with the fact that no system is reliable and everyone has a gap, the only question is whose interest is to use it, if in the interests of a private individual or company, we can count on defending the system.

    ReplyDelete
  8. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    I thought I had an example of Swedish system of charging vehicles via rails sections embedded into the road, that provide power only when there is a vehicle over given section, but can't find information on how the used energy is attributed and billed to the car, so I don't know how smart is this system.

    2. Have you heard about attacks on smart distribution systems?
    Yes, there was some mentions but I didn't pay to much attention.

    3. Do you think IoT can improve the reliability of such systems?
    For sure it can increase complexity and attack surface. I think it's possible to improve reliability of some of systems, but designers have to mind the security and resilience all the time.

    ReplyDelete
  9. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    Unfortunately no. I have not encountered similar distributions. But I would be very interested how in the future it will look like.

    2. Have you heard about attacks on smart distribution systems?

    No, I did not. Are that from some movies or serials.

    3. Do you think IoT can improve the reliability of such systems?

    Yes, I think this system will be able to protect users. Security should be the highest priority

    ReplyDelete
  10. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    It's not really distribution system, but it can reduce traffic jams in city. I talking about ITS-Inteligence Transport System which are used in big cities.

    2. Have you heard about attacks on smart distribution systems?

    I heard but nothing really happen and it stop distribution system only for few minutes so media doesn't get much attention for it. It was power station in USA but after few minutes system rebooted itself and get backup configuration.

    3. Do you think IoT can improve the reliability of such systems?

    I don't think that IoT could improve security...

    ReplyDelete
    Replies
    1. ITS would be an awesome implementation of smart grids. Thank you for the comment.

      Delete
  11. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    I have no idea, maybe such a system can be used to manage the backbone of the Internet.

    2. Have you heard about attacks on smart distribution systems?

    I have not heard of such an attack. But I can imagine what consequences it can have, e.g. overloading the power grid can deprive people and institutions of electricity for a long time.

    3. Do you think IoT can improve the reliability of such systems?

    Of course, as long as the IoT devices themselves are safe. Otherwise it will be another attack vector, which may make the system worse.

    ReplyDelete
  12. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    Hi, I am not sure is it a good example but part of smart distribution system in electricity is surges protection. It is complicated solution that protects our staff especially during the storm.

    2. Have you heard about attacks on smart distribution systems?

    I have not heard of such an attack, but security is crucial in that field. Breakdown in such infrastructure leads to disasters … of course each important institution like hospital has emergency power supply but it is very dangerous.

    3. Do you think IoT can improve the reliability of such systems?

    I believe it. IoT is very popular in such kind of solutions. Nevertheless the biggest gap in IoT is in security. We can find everyday information about security holes in IoT device.

    ReplyDelete
    Replies
    1. Hospitals have backup energy generators based on diesel, so there is a high chance that they can avoid being blacked out.

      Delete
  13. Few questions:
    1. Can you give an example of the smart distribution system (excl. electric, water)?
    Unfortunately I have never think of it and it is difficult to give a new example.
    2. Have you heard about attacks on smart distribution systems?
    No I have never heard about such attacks but I believe that there is such possibility and it may be dangerous.
    3. Do you think IoT can improve the reliability of such systems?
    On the one hand I think it can improve reliability as there will be possibility to control it all the time. On the other hand it may bring new possibilities of hacker attacks.

    ReplyDelete
  14. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    Besides electric or water it’s hard to say but Smart Grid uses also energy from wind power plants.

    2. Have you heard about attacks on smart distribution systems?
    Yes, of course. I have been studying Smart Grid and there were several famous attacks. The most popular was in Australia, in 2000. Here you have more information about this event: https://www.mitre.org/sites/default/files/pdf/08_1145.pdf

    3. Do you think IoT can improve the reliability of such systems?
    IoT in Smart Grid? But for what reason? First of all, there will be another possibility to attack such devices. At the moment, IoTs are poorly embedded in cybersecurity. Secondly, there are already standards, for example IEC 61850 or IEC 62351, which are constantly updated (the second one was updated in 2017) and ensure the security of such networks.

    ReplyDelete
    Replies
    1. Thank you for the link. It was a long time ago, 18 years in IT is a long time period. Standard is one thing, implementing it correctly is another one. How many old devices are still working and are not secured at all?

      Delete
  15. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    It's not something I am an expert of. Still, I can recommend an excellent book connected with that topic, describing what could happen if electricity will go off. It's called "Blackout", it's worth to read.

    2. Have you heard about attacks on smart distribution systems?
    I'm not an expert or a fan of this kind of topics, so I didn't search for news like that. From the other hand, I suppose governments won't share information of that kind.

    3. Do you think IoT can improve the reliability of such systems?
    Of course!

    ReplyDelete
  16. Przemek,
    Actually I can give a particular example of such system, because I was takin part in international project named “Rigrid”. The result of this project is demonstration installation of smartgrid system in Puńsk (north-east Poland), including sewage treatment plant, PVs, energy storage and distributed energy sources. We investigated the system working both in island and controlled conditions. We monitored it by remote-controlled software.
    The attacks on such systems is a mail reason they are not being developed as fast as they could. During our project we worked on demonstration installation, so it wasn’t attacked, that’s why I have no examples of such attacks coming from my own professional practice.
    As for third question, IoT can improve system’s reliability, but it can also introduce additional disruptions interfering it. Then we have to deal with more problems, flowing from this system’s features.
    BR
    Marta


    ReplyDelete
  17. It's diffinitely not my topic and I'm not even sure if I understand your questions correctly.
    Can be the distribution of Netflix media considered an intelligent system? It isn't that obvious how to serve so much data to millions of users at the same time providing that the solution must be fast and stable.

    I also associate distribution systems with nerual networks trianing in TensorFlow where operations can be distributted accross multiple devices and done in parallel.

    ReplyDelete
  18. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    Traffic Light Control System

    2. Have you heard about attacks on smart distribution systems?
    I haven't heard about any attacks.

    3. Do you think IoT can improve the reliability of such systems?
    I think so. At the beginning you need to think about IoT security and improve it. There are many publications on the Internet about the use of IoT in Smart Grid.

    ReplyDelete
  19. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    I think of Traffic Light Control System. Such coordination ensures that traffic and pedestrians move as smoothly, and safely as possible.
    2. Have you heard about attacks on smart distribution systems?
    Unfortunately, I have not heard of any attacks on smart distribution systems. Regarding the Traffic Light Control Systems it could be quite dangerous.
    3. Do you think IoT can improve the reliability of such systems?
    I believe that IoT may improve the reliability of such systems. However, the main weakness is the security of such systems.

    ReplyDelete
    Replies
    1. It looks like Traffic Light Control System is winning in the comments :)

      Delete
  20. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    In United Kingdom they already using smard grid solutions such as smart meters.
    2. Have you heard about attacks on smart distribution systems?
    no, but for sure there are attempts but it is not public information. It is not in interest of utility companies to share that kind of information
    3. Do you think IoT can improve the reliability of such systems?
    Those systems are based on Internet od Things. DLT or E2E encryption could improve security

    ReplyDelete
    Replies
    1. The problem with encryption is computation power, but it's a start. However, we can't improve it on old devices.

      Delete
  21. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    The first thing that comes to my mind is traffic Light Control System.

    2. Have you heard about attacks on smart distribution systems?

    Yes, I have. I still do not understand what the reason for such attacks is, apart from showing "We can do it! Be scared of us hackers", but I guess there have reasons for that, known only to them.

    3. Do you think IoT can improve the reliability of such systems?
    Maybe, though I'm not really sure.

    ReplyDelete
  22. 1. Can you give an example of the smart distribution system (excl. electric, water)?
    I think that passive house is a great example of smart distribution system. Everything in such house is created to be as efficient as possible in terms of heat, water and electricity.

    2. Have you heard about attacks on smart distribution systems?
    3. Do you think IoT can improve the reliability of such systems?
    Yes, recently there was a breach in Samsung IoT platforms. Every device in the house could be attacked, even something such simple like someone fridge. The problem with this is the fact that manufacturers are creating a lot of new devices with new versions of there systems BUT they are forgetting about upgrading old devices. This must be changed, if it won’t than every device will be attacked sooner or later.



    ReplyDelete
  23. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    Heat and natural gas. They are also 'grids' and as such can be upgraded to 'smart grids'.
    Routing network traffic / managing throuput in computer networks would also fall under
    such a definition.

    2. Have you heard about attacks on smart distribution systems?

    Mostly in works of fiction. There's a pseudo-documentary "Blackout in America" (or some such, I'm not exactly sure of the name), where a cyber-attack causes a large scale grid failure, disabling the civilization for a few days (transportation, refrigeration and cellular network among others). I can't remember hearing about them in the news though.

    3. Do you think IoT can improve the reliability of such systems?

    They are already something to be considered IoT. It was IoT 'before it was cool'. The use of 'smart' devices to control the distribution allows for many things -- savings, increased efficiency etc. But it's the very devices that can be hacked. As for physical security (vandalism, terrorism and so on), the real-time monitoring is a substantial improvement. But without information seurity the infrastructure becomes a risk factor in and of itself.

    ReplyDelete
  24. 1. Can you give an example of the smart distribution system (excl. electric, water)?

    I can’t think of any specific systems right now, but I think there are a lot of possibilites, like the connection between cars and the garage’s gate or entrance gate, connection between tablets and house devices such as refigerators or washing machines. I think that smart distribution system may be used in the factories, in the proccess of the production.
    2. Have you heard about attacks on smart distribution systems?

    Unfortunately I can’t remember any news connected to such attacks, but I recently read a book called „Blackout” by Marc Elsberg. It is about such situation. It is about an attack on the elctricity, which causes the break in a delivery of the electricity from the main electricity net. Eventually almost the whole world no longer has the access to the electricity. It perfectly shows, how the society may behave in the face of the blackout, when they slowly are out of not only an electricity, but also food, warm and safety. I think that this book really presents the threats connecting to the fact, that nowadays people are almost completely dependable on the electricity.
    3. Do you think IoT can improve the reliability of such systems?

    I think this is possible, because it can be really helpful to immediately show any holes and mulfunctions in the system, but also I am sure that using the IoT must be very careful, because it involves a lot of security problems.

    ReplyDelete