Improving the Cyber-Security of the Electricity Demand-Response Aggregator Structure

The Demand Response (DR) Aggregator was created in the UES of Russia to manage the mechanism of price-dependent reduction of electricity consumption. The DR-Aggregator combines the resources of active consumers who have their own sources and/or energy storage, and the ability to shift their electricity consumption to off-peak hours. The DR-Aggregator has a hierarchical cluster structure, and consists of two closely interacting subsystems: technological and information-communication. Traditionally, the structure of the DR-Aggregator is managed centrally, information is collected and transmitted to devices in the control center by a communication environment through various communication channels, often insufficiently protected. It creates problems with confidentiality and security of data transmission because of cyber-attacks. The paper analyzes possible cyber-attacks on energy facilities included in the structure of the DR-Aggregator and on the demand management mechanism, suggests information protection measures, as well as technical and organizational measures aimed at improving cybersecurity during the operation of the DR-Aggregator.