The mission of this group is to bring together utility professionals in the power industry who are in the thick of the digital utility transformation. 

WARNING: SIGN-IN

You need to be a member of Energy Central to access some features and content. Please or register to continue.

Post

NOVEC, Lockheed Martin demo smart grid cybersecurity

By Jim Moxley and Roger Flanagan

 

At the start of the 21st century, the U.S. National Academy of Engineering chose large-scale electricity networks as the greatest engineering achievement of the previous 100 years.  Yet most of those same networks, for the first decade of the new century, were slow to adopt the information technology advances that were transforming many other sectors of today’s economy.

While that might seem like a missed opportunity in one sense, in another sense it is providing a different opportunity, one that some early technology adopters didn’t have.  That is the chance to incorporate cybersecurity solutions as an integral part of newly developed technology systems, rather than racing to protect existing systems that were deployed before the full extent and nature of the threats were known.

As smart grid technology implementation accelerates, and protecting the power grid from attack is becoming a national priority, the time is now to take advantage of the opportunity for fully integrating cybersecurity with smart grid technology deployment.  In fact, it’s already happening through government and industry cooperation.

One example is the Northern Virginia Electric Cooperative (NOVEC) electrical distribution system smart grid program, which incorporates a robust cybersecurity plan and infrastructure developed by Lockheed Martin Corporation.

Improved distribution efficiency

The full spectrum of smart grid technology starts with power generation, encompasses the entire transmission and distribution infrastructure, and extends all the way down to customer meters.  The NOVEC project, completed recently with the help of a $5 million grant from the U.S. Department of Energy through the 2009 American Recovery and Reinvestment Act, focused on digital substation and distribution line technologies that are enabling more accurate equipment control, more reliable equipment operation, and much more timely and effective monitoring of critical equipment.

The project has included installation of automatically switched capacitor banks to improve distribution line efficiencies, as well as remotely operated switches and protective devices to enhance system reliability and provide operators with greater flexibility.  New substation automation technology, meanwhile, has greatly increased the accuracy and effectiveness of circuit protection equipment and provided significant improvements in substation equipment monitoring.  It also has enhanced physical security through video monitoring.

Taking full advantage of these technologies required NOVEC to build a communications network that connects elements of the system and supports real-time data exchange.  But technology networks come with a downside: they create potential points of entry for cyber attacks.  To address the issue of network vulnerability, NOVEC teamed with Lockheed Martin early in its planning process for the smart grid project.

Segregated systems

Before NOVEC implemented its smart grid grant from the Department of Energy, Lockheed Martin performed a vulnerability assessment to test the utility’s approach to integrating smart grid devices.  It used its findings to establish a baseline and develop a cybersecurity plan that was incorporated into the proposal to DOE.

One of the basic principles of protecting utilities from network intrusions and attacks is segregating information technology from operational technology.  In the context of the power industry, IT systems are those that are commonly referred to as corporate networks.  They handle customer care and billing; geographical information management; financial management; engineering analysis; and several other similar corporate-level functions.

Operational technology systems, on the other hand, are those that control the power grid.  These supervisory control and data acquisition systems have become increasingly sophisticated in recent years as smart grid technologies have begun to proliferate across distribution networks.

Building a perimeter around the OT system was a key focus of the NOVEC cybersecurity plan.  Lockheed Martin implemented technology solutions that successfully maximized segregation between the utility’s IT and OT systems, eliminated Internet connections to OT networks, and enhanced network access controls.

Building cybersecurity awareness

Beyond implementing technology solutions, NOVEC and Lockheed Martin are working together to make cybersecurity awareness part of the culture at the utility — and beyond.  User awareness and training programs are being implemented to help employees recognize and respond appropriately to social engineering and phishing scams.

Additional preparedness initiatives include annual vulnerability assessments and penetration tests, step-by-step processes for mitigating identified risks, and reliance on the industry’s latest standards and practices, including North American Electric Reliability Corporation guidelines.

Based on the success of the NOVEC smart grid project, the utility and Lockheed Martin believe that robust cybersecurity can and must be implemented effectively and efficiently across the power grid as new smart technologies are put in operation.

In collaboration with U.S. Rep. Frank Wolf, NOVEC hosted a cybersecurity forum in September that drew participation from electric utilities throughout Virginia and Maryland.  Presenters at the conference included PJM, Dominion Virginia Power, the FBI, and Lockheed Martin. Furthermore, cybersecurity was a major part of the agenda at the executive level meeting of the Association of Large Distribution Cooperatives in Florida in October. 

The path forward

Although the application of advanced information technology in the utility industry has not come as quickly as it has in some other sectors, there is no doubt that the moment has arrived.  In the years ahead, smart grid technologies using common protocols will proliferate across the industry, bringing tremendous cost and energy savings, and greatly improving system reliability.

To ensure that these benefits are not undermined by vulnerability to cyber attack, the industry, in collaboration with government and cybersecurity partners, must tap the growing body of cybersecurity knowledge to protect their networks.  Electric utilities find themselves in the enviable position of being able to implement lessons learned from past cyber attacks, and they must take full advantage of it for the sake of their businesses, their customers, and national security.

 

Jim Moxley is senior vice president, administrations, substations and telecommunications for the Northern Virginia Electric Cooperative (NOVEC), a locally based and locally owned electric distribution system headquartered in Manassas, Va. 

 

Roger Flanagan, Ph. D., is director of energy solutions at Lockheed Martin. Based in Bethesda, Md., Lockheed Martin is a global security and aerospace company that is engaged in the research, design, development, manufacture, integration and sustainment of advanced technology systems, products and services.

 

 

Got a case study of interest to our readers? Contact Kathleen Wolf Davis at kdavis@energycentral.com with the details.

Kathleen Wolf Davis's picture

Thank Kathleen for the Post!

Energy Central contributors share their experience and insights for the benefit of other Members (like you). Please show them your appreciation by leaving a comment, 'liking' this post, or following this Member.

Discussions

No discussions yet. Start a discussion below.

Get Published - Build a Following

The Energy Central Power Industry Network is based on one core idea - power industry professionals helping each other and advancing the industry by sharing and learning from each other.

If you have an experience or insight to share or have learned something from a conference or seminar, your peers and colleagues on Energy Central want to hear about it. It's also easy to share a link to an article you've liked or an industry resource that you think would be helpful.

                 Learn more about posting on Energy Central »