A COMPREHENSIVE ANALYSIS OF THREATS AND COUNTERMEASURES IN VIRTUALIZED CYBER-PHYSICAL ENERGY SYSTEMS

High integration of distributed energy resources raises the challenge of reliable operation to power system operators. In order to improve the ability to monitor and control power systems, automation systems are necessary. However, the operational flexibility of automation systems to deal with abnormal situations is currently limited. In this regard, virtualization as a key enabling technology to improve the operational flexibility in Cyber-Physical Energy Systems has been proposed. To this end, grid services (e.g. state estimation, coordinated voltage control), which are traditionally bound to hardware, are separated from underlying computation platforms. This provides modularity and isolation of grid services, which enables monitoring, managing and deploying them independently. However, virtualizing grid services, resulting in increased system complexity, can cause new security concerns. This paper analyzes virtualized Cyber-Physical Energy Systems from a security viewpoint and identifies associated security threats. Based on security requirements and potential solutions addressed by IEC 62351 security standard, a set of studies is conducted to analyze the effect of traditional security mechanisms, when applied to virtualized Cyber-Physical Energy Systems. Finally, possible software solutions and recommendations that protect the system against threats are proposed. Future research directions and open problems are stated at the end.