Tutorial: Security in Electric Utility Control Systems

This paper provides a tutorial on practical security measures that can be implemented in power system communication networks. It also includes a discussion and comparison of NERC CIP regulations requirements and proven IT security implementations. This tutorial provides a straightforward look at what NERC CIP requires along with potential steps on how to comply, what basic cybersecurity practices are available today, and how these can be implemented quickly and inexpensively. This tutorial examines new security protocols in development for substation applications to achieve cybersecurity using proven and vetted IT security protocols tailored for substation use including Ethernet, serial, and modem communications links. This tutorial covers specifically emerging standards including the following: 1. IEEE P1711-trial-use standard for a cryptographic protocol for cybersecurity of substation serial links. 2. OPSAID (Open PCS Security Architecture for Interoperable Design)-Design standard vendors may use to build secure systems for use in industrial control applications. The standard comes from the OPSAID project, under the auspices of the U. S. Department of Energy Office of the Electric Delivery and Reliability's National SCADA Test Bed Program.