Search Menu
DOE PAGES title logo U.S. Department of Energy
Office of Scientific and Technical Information
Search Scholarly Publications

Title: Cybersecurity Resilience Demonstration for Wind Energy Sites in Co-Simulation Environment

Abstract

Sandia National Laboratories and Idaho National Laboratory deployed state-of-the-art cybersecurity technologies within a virtualized, cyber-physical wind energy site to demonstrate their impact on security and resilience. This work was designed to better quantify cost-benefit tradeoffs and risk reductions when layering different security technologies on wind energy operational technology networks. Standardized step-by-step attack scenarios were drafted for adversaries with remote and local access to the wind network. Then, the team investigated the impact of encryption, access control, intrusion detection, security information and event management, and security, orchestration, automation, and response (SOAR) tools on multiple metrics, including physical impacts to the power system and termination of the adversary kill chain. We found, once programmed, the intrusion detection systems could detect attacks and the SOAR system was able to effectively and autonomously quarantine the adversary, prior to power system impacts. Cyber and physical metrics indicated network and endpoint visibility were essential to provide human defenders situational awareness to maintain system resilience. Certain hardening technologies, like encryption, reduced adversary access, but recognition and response were also critical to maintain wind site operations. Lastly, a cost-benefit analysis was performed to estimate payback periods for deploying cybersecurity technologies based on projected breach costs.

Authors:
ORCiD logo [1]; ORCiD logo [2]; ORCiD logo [3]; ORCiD logo [1];  [1];  [1];  [1];  [1];  [1];  [1];  [2]
+ Show Author Affiliations
  1. Idaho National Laboratory, Idaho Falls, ID, USA
  2. Sandia National Laboratories, Albuquerque, NM, USA
  3. DNK Consulting, Albuquerque, NM, USA
Publication Date:
Research Org.:
Sandia National Lab. (SNL-NM), Albuquerque, NM (United States); Idaho National Laboratory (INL), Idaho Falls, ID (United States)
Sponsoring Org.:
USDOE Office of Energy Efficiency and Renewable Energy (EERE), Renewable Power Office. Wind Energy Technologies Office; USDOE National Nuclear Security Administration (NNSA)
OSTI Identifier:
1924575
Alternate Identifier(s):
OSTI ID: 1957857; OSTI ID: 2311621
Report Number(s):
SAND-2023-12642J
Journal ID: ISSN 2169-3536; 10043706
Grant/Contract Number:  
NA0003525; AC07-05ID14517
Resource Type:
Published Article
Journal Name:
IEEE Access
Additional Journal Information:
Journal Name: IEEE Access Journal Volume: 11; Journal ID: ISSN 2169-3536
Publisher:
Institute of Electrical and Electronics Engineers
Country of Publication:
United States
Language:
English
Subject:
17 WIND ENERGY; 97 MATHEMATICS AND COMPUTING; wind turbine generation; cybersecurity; cyber-resilience; co-simulation; cyber-physical systems

Citation Formats

Mccarty, Michael, Johnson, Jay, Richardson, Bryan, Rieger, Craig, Cooley, Rafer, Gentle, Jake, Rothwell, Bradley, Phillips, Tyler, Novak, Beverly, Culler, Megan, and Wright, Brian. Cybersecurity Resilience Demonstration for Wind Energy Sites in Co-Simulation Environment. United States: N. p., 2023. Web. doi:10.1109/ACCESS.2023.3244778.
Copy to clipboard
Mccarty, Michael, Johnson, Jay, Richardson, Bryan, Rieger, Craig, Cooley, Rafer, Gentle, Jake, Rothwell, Bradley, Phillips, Tyler, Novak, Beverly, Culler, Megan, & Wright, Brian. Cybersecurity Resilience Demonstration for Wind Energy Sites in Co-Simulation Environment. United States. https://doi.org/10.1109/ACCESS.2023.3244778
Copy to clipboard
Mccarty, Michael, Johnson, Jay, Richardson, Bryan, Rieger, Craig, Cooley, Rafer, Gentle, Jake, Rothwell, Bradley, Phillips, Tyler, Novak, Beverly, Culler, Megan, and Wright, Brian. Sun . "Cybersecurity Resilience Demonstration for Wind Energy Sites in Co-Simulation Environment". United States. https://doi.org/10.1109/ACCESS.2023.3244778.
Copy to clipboard
@article{osti_1924575,
title = {Cybersecurity Resilience Demonstration for Wind Energy Sites in Co-Simulation Environment},
author = {Mccarty, Michael and Johnson, Jay and Richardson, Bryan and Rieger, Craig and Cooley, Rafer and Gentle, Jake and Rothwell, Bradley and Phillips, Tyler and Novak, Beverly and Culler, Megan and Wright, Brian},
abstractNote = {Sandia National Laboratories and Idaho National Laboratory deployed state-of-the-art cybersecurity technologies within a virtualized, cyber-physical wind energy site to demonstrate their impact on security and resilience. This work was designed to better quantify cost-benefit tradeoffs and risk reductions when layering different security technologies on wind energy operational technology networks. Standardized step-by-step attack scenarios were drafted for adversaries with remote and local access to the wind network. Then, the team investigated the impact of encryption, access control, intrusion detection, security information and event management, and security, orchestration, automation, and response (SOAR) tools on multiple metrics, including physical impacts to the power system and termination of the adversary kill chain. We found, once programmed, the intrusion detection systems could detect attacks and the SOAR system was able to effectively and autonomously quarantine the adversary, prior to power system impacts. Cyber and physical metrics indicated network and endpoint visibility were essential to provide human defenders situational awareness to maintain system resilience. Certain hardening technologies, like encryption, reduced adversary access, but recognition and response were also critical to maintain wind site operations. Lastly, a cost-benefit analysis was performed to estimate payback periods for deploying cybersecurity technologies based on projected breach costs.},
doi = {10.1109/ACCESS.2023.3244778},
journal = {IEEE Access},
number = ,
volume = 11,
place = {United States},
year = {Sun Jan 01 00:00:00 EST 2023},
month = {Sun Jan 01 00:00:00 EST 2023}
}
Copy to clipboard
Journal Article:
Free Publicly Available Full Text
Publisher's Version of Record
https://doi.org/10.1109/ACCESS.2023.3244778
Copyright Statement
Other availability
Search WorldCat Search WorldCat to find libraries that may hold this journal
Save / Share:
Export Metadata
Save to My Library
You must Sign In or Create an Account in order to save documents to your library.

Works referenced in this record:

Cyber Security Metrics for Performance Measurement in E-Business
conference, December 2018

Wind farm security: attack surface, targets, scenarios and mitigation
journal, June 2017

  • Staggs, Jason; Ferlemann, David; Shenoi, Sujeet
  • International Journal of Critical Infrastructure Protection, Vol. 17
  • DOI: 10.1016/j.ijcip.2017.03.001

Power system protection and resilient metrics
conference, August 2015

Grid Structural Characteristics as Validation Criteria for Synthetic Networks
journal, July 2017

  • Birchfield, Adam B.; Xu, Ti; Gegner, Kathleen M.
  • IEEE Transactions on Power Systems, Vol. 32, Issue 4
  • DOI: 10.1109/TPWRS.2016.2616385

Cyber intrusion of wind farm SCADA system and its impact analysis
conference, March 2011

  • Yan, Jie; Liu, Chen-Ching; Govindarasu, Manimaran
  • 2011 IEEE/PES Power Systems Conference and Exposition (PSCE)
  • DOI: 10.1109/PSCE.2011.5772593

Cyberattack to Cyber-Physical Model of Wind Farm SCADA
conference, October 2018

  • Zabetian-Hosseini, Asal; Mehrizi-Sani, Ali; Liu, Chen-Ching
  • IECON 2018 - 44th Annual Conference of the IEEE Industrial Electronics Society
  • DOI: 10.1109/IECON.2018.8591200

An Operational Resilience Metric for Modern Power Distribution Systems
conference, December 2020

  • Phillips, Tyler; McJunkin, Timothy; Rieger, Craig
  • 2020 IEEE 20th International Conference on Software Quality, Reliability and Security Companion (QRS-C)
  • DOI: 10.1109/QRS-C51114.2020.00065

Synchrophasors-based Master State Awareness Estimator for Cybersecurity in Distribution Grid: Testbed Implementation & Field Demonstration
conference, April 2022

  • Alanzi, Mataz; Challa, Hari; Beleed, Hussain
  • 2022 IEEE Power & Energy Society Innovative Smart Grid Technologies Conference (ISGT)
  • DOI: 10.1109/ISGT50606.2022.9913073

Statistical Considerations in the Creation of Realistic Synthetic Power Grids for Geomagnetic Disturbance Studies
journal, January 2016

Resilient control systems Practical metrics basis for defining mission impact
conference, August 2014

    Sort by:
    [ × clear filter / sort ]

    Similar Records in DOE PAGES and OSTI.GOV collections: