Do we need to apply cyber seurity for distribution networks? Challenges and solutions

Cyber threats to the power grid are on the rise, and attacks are getting sophisticated and more targeted. In 2015, Ukraine attack showed that attacking a distribution system can cause a widespread power outage. From transportation to health services, majority of critical infrastructure is supplied from the distribution networks. In addition, distribution systems have larger attack surface to due geographically dispersed devices. Integration of renewables and Microgrid furthermore introduces more security vulnerabilities to distributed controls over the distribution. This paper first investigates cyber threats and challenges that are specific to Distribution systems. It then discusses cyber security architecture and defence-in-depth security strategies for Distribution system. Then, this paper presents the importance of Intelligent Electronic Device (IED) cyber security features, such as Role Based Access Control (RBAC), Central Authentication and Security event logs, and how to integrate IEDs with third party security systems to provide end-to-end cyber security, such as Security Information and Event Management (SIEM) server, password management systems, firewalls, and Intrusion Detection Systems (IDS). If smart IEDs supports built-in cyber security functions, this will eliminate the need for any external security gateway devices over the geographically distributed controllers in the distribution networks. Lastly, this paper discusses how to bring technology, processes, and people together with security services such as security risk assessment, training, and patch management.