{"id":2871,"date":"2024-10-03T21:27:40","date_gmt":"2024-10-03T21:27:40","guid":{"rendered":"https:\/\/horizon.peachpuff-wolverine-566518.hostingersite.com\/?p=2871"},"modified":"2024-10-03T21:27:40","modified_gmt":"2024-10-03T21:27:40","slug":"guardians-of-the-grid-protecting-europes-electricity-supply-from-cyber-attacks","status":"publish","type":"post","link":"https:\/\/scienceblog.com\/horizon\/2871\/guardians-of-the-grid-protecting-europes-electricity-supply-from-cyber-attacks\/","title":{"rendered":"Guardians of the grid \u2013 protecting Europe\u2019s electricity supply from cyber-attacks"},"content":{"rendered":"

EU-funded researchers are fortifying Europe\u2019s electricity sector against increasingly sophisticated attacks by cybercriminals.<\/p>\n

By<\/em> Michael Allen<\/p>\n

In the past decade, cyber-attacks on Europe\u2019s power infrastructure have intensified so much that energy companies, experts and politicians called for help. Researchers came together to boost the resilience of European energy networks.<\/p>\n

The International Energy Agency\u00a0warned<\/a> in a November 2023 report that the average number of cyber-attacks against utilities worldwide more than doubled between 2020 and 2022. It singled out electricity grids, which are increasingly switching to digital technology.<\/p>\n

\u201cThe technologies now deployed along electric grids make them vulnerable to issues with communication and information technology,\u201d said Jes\u00fas Torres, an expert in smart grids at the Spanish technology centre CIRCE.<\/p>\n

Defending the grid<\/strong><\/p>\n

Torres leads a multi-country research initiative called\u00a0eFORT<\/a> that received EU funding to address the vulnerability of energy networks.<\/p>\n

Researchers, energy companies and cybersecurity experts from Belgium, Cyprus, Germany, Greece, Italy, the Netherlands and Spain, plus Norway and Ukraine, are exploring ways to increase the reliability and resilience of power grids as Europe transitions to a fully digital system.<\/p>\n

\u201cThe grid now has a double nature,\u201d said Torres. \u201cIt\u2019s an electrical system, but it\u2019s also a cyber system. Everything is digitalised, with sensors that can both monitor and control the grid.\u201d<\/p>\n

That is why, since 2022, the eFORT team has been conducting simulations to understand how to protect electric grids from different kinds of cyber-attacks.<\/p>\n

Simulating attacks<\/strong><\/p>\n

One particular area of concern is what Torres refers to as a \u201cmanipulation of demand\u201d attack, when multiple internet-connected energy devices, like charging points for electric vehicles, are tricked into sending misleading information to the power grid.<\/p>\n

For example, the grid might receive data indicating a lower demand for electricity than actually exists.<\/p>\n

\u201cThe grid is then not configured for the actual demand, and this can lead to outages,\u201d explained Torres.<\/p>\n

The researchers\u2019 simulations have shown that by targeting thousands of internet-connected devices, such attacks could trigger large-scale power cuts.<\/p>\n

AI to the rescue<\/strong><\/p>\n

To counter attacks that corrupt information transmitted to the grid, the eFORT team is turning to artificial intelligence. The idea is to use algorithms to analyse grid communications and identify anomalies that signal potential issues.<\/p>\n

Quick action is crucial once an attack is identified. In addition to shutting down affected grid elements, it may be necessary to isolate broader sections of the grid. By identifying these cascading effects, the eFORT researchers are designing targeted responses.<\/p>\n

They are testing techniques to identify, prevent and mitigate grid disturbances in Spain, the Netherlands, Italy and Ukraine.<\/p>\n

For instance, one Dutch pilot study includes a simulated control room where grid operators are trained to both defend against and emulate attacks, making them better able to manage threats.<\/p>\n

AI also plays a central role in the three-year EU-funded\u00a0ELECTRON<\/a> project, which aims to make it possible to isolate grid sections to prevent the spread of attacks.<\/p>\n

The ELECTRON team\u2019s mission is to develop new-generation electricity platforms that will constantly assess cyber risks, detect anomalies and prevent failures.<\/p>\n

Greek cybersecurity expert Andreas Zalonis, who coordinates this research, said that while there is often a financial motivation to these attacks, they can also be driven by a desire to destabilise society or create fear.<\/p>\n

\u201cThere are a lot of different types of attack,\u201d he said.<\/p>\n

Along with ransomware attacks, where money is demanded to restore systems, Zalonis explained that economic motivations for attacks can also lie in the financial damage they can cause.<\/p>\n

\u201cFor example, a power outage can have a significant financial cost for local companies, not just the energy and electrical system operators, and also for society,\u201d he said.<\/p>\n

The ELECTRON researchers hope to provide a series of tools to help European supply companies tackle cybersecurity issues.<\/p>\n

They are conducting four pilot studies, including one inspired by the 2015 hacking of a power distributor in western Ukraine, which left more than 230\u00a0000 people without power.<\/p>\n

Another study looks at cybersecurity risks to the Romanian power grid, which is powered by a mix of hydropower, coal, nuclear energy, natural gas and wind power.<\/p>\n

The other two studies explore how to protect renewable energy supplies from cyber-attacks and test the resilience of an electric vehicle charging network in Greece.<\/p>\n

The ELECTRON researchers are looking at everything related to a cyber-attack, from identifying parts of the grid most vulnerable to attack, through detecting and responding to attacks, to recovery after attacks.<\/p>\n

AI is again being used to detect threats by monitoring information flows.<\/p>\n

As part of these efforts, the researchers recently published information for electricity companies, highlighting the sort of communication anomalies that indicate someone might be interfering with the grid.<\/p>\n

They are also distributing training materials, including attack scenarios, to help prepare those working on the grid. In addition, they are applying for patents for techniques that can be used to improve the security of electric vehicle charging points.<\/p>\n

\u201cThe overall goal is always to increase the resilience of the infrastructure,\u201d said Zalonis.<\/p>\n

Research in this article was funded by the EU\u2019s Horizon Programme. The views of the interviewees don\u2019t necessarily reflect those of the European Commission. <\/em><\/p>\n

More info<\/p>\n