Cyber-Physical Security in Energy Infrastructure of Smart Cities (CPSEC)

Infrastruktur for energi, som i dagens samfunn er støttet av moderne Informasjons- og Kommunikasjonsteknologi (IKT), er blant de viktigste typene Kritisk Infrastruktur (KI) sommuliggjør vitale samfunnsoppgaver. Skade eller ødeleggelse på slik kritisk infrastruktur ved cyberangrep, naturkatastrofer, terrorisme eller kriminell aktivitet kan få store negative følger for sikkerhet og trygghet i moderne «Smart Cities» type bygningsmasser og i samfunnet generelt. Det nye trusselbilde knyttet til cyberangrep, angrep mot fysiske installasjoner, eller kombinerte cyber-fysiske angrep samt ukonvensjonelle trusler utfordrer grensene til tradisjonelle risikovurderinger for KI og løsningene som beskytter de. Det er ikke god kost-nytte å redusere alle identifiserte risikoer til et minimum. Samtidig er det ikke mulig å identifisere alle mulige trusler, vi må kunne håndtere det uforutsette. For å oppnå god kost-nytte og håndtering av det uforutsette foreslår CPSEC en omfattende og systematisk tilnærming som kombinerer løsninger for cyber- og fysisksikkerhet for å beskytte energi infrastruktur i «Smart Cities» type områder med bygningsmasser som kontrolleres med moderne teknologi. Får å realisere målene i CPSEC er en internasjonal gruppe av fremragende forskere opprettet for å adressere: a) cyber, fysisk- og kombinert cyber-fysiske trusler; b) avhengigheter mellom ulike KI, kaskade effekter og beskyttelse av legacy-systemer; og C) utvikle kostnadseffektive løsninger for å oppmuntre til utplassering i et globalt krisemiljø. CPSEC resulterte i fullføring av to doktorgradsavhandlinger, og publisering av forskningsresultater i internasjonale tidsskrifter og konferanser. CPSEC førte også til utover og innover mobilitet av akademikere mellom partnerinstitusjoner i Norge og India.

The potential outcomes and impacts based on the project results are expected to benefit society as a whole. CPSEC will contribute towards a safer society by protecting electricity infrastructures (and other CIs that depend on them) from blackouts and cyber-physical attacks, improving reliability and identifying infrastructure that needs maintenance. The outcomes of the realisation of this project for society will also include the creation of new research opportunities and corresponding jobs, better infrastructure management and less energy cost by better-informing consumers through smart applications, greener energy by integrating renewable energy sources, as well as new services in the field of utility networks. CPSEC will have a remarkable effect on the smooth operation of the energy system, which will increase the reliability and unhindered operation of social infrastructure such as public transport, healthcare and telecommunications. CPSEC will increase the reliability of the energy system, thereby increasing the trust of energy consumers in the energy system.

Energy infrastructures, assisted by the adoption of modern ICT, are among the main Critical Infrastructures (CIs) which are essential to maintain vital societal functions. Damage or destruction of these infrastructures by cyber-attacks, natural disasters, terrorism and criminal activity may have negative consequences for the security and safety of modern Smart Cities and society at large. Emerging cyber, physical and combined cyber-physical threats, as well as unconventional attacks to CIs have exposed the limits of traditional risk assessment, as well as those of protection solutions. Some of these threats cannot be foreseen, while reducing all possible risks at the minimum possible level is not always cost effective. Inevitably, the energy production and distribution systems, which comprise a vital economic and social infrastructure, are exposed to: a) security threats inherited from the ICT sector b) physical attacks like bombing, fires and floods and (c) combinations of cyber and physical threats. A potential attack to an energy installation may lead to cascading failures, leading to disruptions with severe consequences like destruction of other interconnected CIs, loss of human lives and environmental impact. To this end, the CPSEC project proposes a comprehensive and systemic approach combining cyber and physical security solutions to protect energy installations in smart cities. The main technical output of the project will be the Integrated Security, Safety and Site Management (IS3M) platform which will cover a wide variety of concepts, including, systemic risk management, prevention by design, monitoring and detection, response and mitigation, and information sharing. To realize its goals CPSEC brings together a team of internationally renowned researchers to address issues pertaining to: a) cyber, physical and cyber-physical threats b) interconnections among CIs,cascading effects and the protection of legacy equipment c)developing cost-effective solutions.