Enhancing Smart Grid Security Through Cyber Threat Intelligence

Abstract

Energy sector digitization is rapidly increasing through technologies such as smart grid deployment and cyber physical power systems (CPPSs). It has enhanced the efficiency and sustainability of energy infrastructure. However, this transformation has also increased the attack surface for smart energy systems. There are several cases related to cyber-attacks and security breaches of smart grids reported. Cyber criminals release breached data on different platforms like dark web, hacker forums. This case study evaluates how the breached data can be misused by cyber criminals to further disrupt smart grid operations. The definite goal of this work is to create cyber threat intelligence for smart grids from breached dataset. Synthetic dataset of power grid available on the Dark-Net market archive is used in the proposed work. An intelligent model for smart grids is developed to identify confidential information exposed in the data breaches. Threat modelling is done to analyse potential threats to the compromised power grid. In real world, this study gives energy sector a proactive approach to analyse breached dataset. By understanding impact of threats, energy providers can strengthen the security posture of smart grid. This work highlights the importance of cyber threat intelligence for smart grid's security.