Security Baseline for Substation Automation Systems.

Area of Science:

• Electrical Engineering
• Computer Science
• Cyber Security

Background:

• The energy sector's increasing reliance on information technology and automation for electricity transmission and distribution introduces significant cyber security risks.
• Intelligent control systems in smart grids, integrating IoT and IED devices, form a critical communication infrastructure with unique vulnerabilities.
• Standard IT security constraints are insufficient for protecting specialized energy distribution systems.

Purpose of the Study:

• To address the challenge of comprehensively protecting specialized smart grid control systems in the energy sector.
• To develop a security concept for power station control systems within the Smart Grid domain model.
• To design mitigation measures for intelligent distribution substations based on established security frameworks.

Main Methods:

• Application of the Purdue model to the Smart Grid domain, focusing on substation intelligence.
• Development of a security concept for control systems in power transmission and distribution.
• Design of mitigation measures categorized as mandatory and recommended, referencing the MITRE ATT&CK matrix.

Main Results:

• A comprehensive security concept for smart grid control systems, emphasizing substation intelligence.
• Detailed mitigation measures mapped to the MITRE ATT&CK matrix for intelligent distribution substations.
• The proposed solution aligns with ISO 27001 and NIS2 legislation.

Conclusions:

• A specialized approach is necessary for securing smart grid control systems, considering their unique technological and operational aspects.
• The proposed security baseline provides a robust framework for enhancing cyber security in the energy sector.
• Industry-tested solutions aligned with international standards ensure compliance and effective protection of critical energy infrastructure.