Low-Latency Security for Time-Critical Grid Communication with Shabnam Saderi, Research Assistant

Smart Grid Security: Classical and Post-Quantum Approaches - Webinar Summary

Key Concepts:

• Smart Grid: A modernized power grid utilizing digital communication, automation, and computing for improved efficiency, reliability, and sustainability.
• Operational Technology (OT): Hardware and software used to control physical processes, such as those in a power grid.
• Industrial Control Systems (ICS): Systems used to control industrial processes, including PLCs, RTUs, and SCADA systems.
• Authenticated Data Acquisition (ADA): A secure communication protocol for reliable data transfer within the smart grid.
• Post-Quantum Cryptography (PQC): Cryptographic algorithms resistant to attacks from quantum computers.
• Key Encapsulation Mechanism (KEM): A cryptographic system used to establish a shared secret key, particularly relevant in post-quantum scenarios.
• Authenticated Encryption with Associated Data (AEAD): A cryptographic primitive providing both confidentiality and integrity.
• TLS (Transport Layer Security): A widely used cryptographic protocol for secure communication over a network.
• Modbus: A serial communication protocol commonly used in industrial control systems.
• PLC (Programmable Logic Controller): A specialized computer used to automate industrial processes.
• RTU (Remote Terminal Unit): A device used to monitor and control remote equipment in a SCADA system.

1. Introduction to Smart Grids & Security Concerns

The webinar, presented by Shabnam Sari from the Canadian Institute for Cyber Security, focused on securing communication infrastructure within smart grids. Traditional power networks relied on minimal digital communication, primarily one-way monitoring and manual control. Smart grids integrate computing, communication, and automation throughout the power delivery process, enabling real-time situational awareness and automated decision-making. This transformation, while beneficial, introduces significant cybersecurity vulnerabilities. The smart grid is now a cyber-physical system, making communication security paramount.

2. The Need for Enhanced Security in Smart Grids

Several factors necessitate enhanced security:

• Real-time Visibility & Control: Smart grids manage thousands of devices, requiring secure communication for effective control.
• Demand Response & Load Balancing: Efficient power delivery relies on secure data exchange.
• Fault Detection & Restoration: Automated fault detection and rapid restoration depend on reliable communication.
• Renewable Energy Integration: Fluctuating renewable energy sources require secure and responsive grid management.
• Bi-directional Communication: Consumers actively participate through smart meters, solar panels, and electric vehicles, increasing the attack surface.

The smart grid can be categorized into four domains: Generation, Transmission & Distribution, Commercial & Industrial, and Residential. An attacker compromising any of these domains could cause significant disruption, ranging from power outages to privacy breaches. The communication infrastructure is identified as the critical element tying all devices together and therefore the primary focus of the research.

3. Proposed Solution: Authenticated Data Acquisition (ADA) Protocols

Shabnam Sari and her team developed two variants of an ADA protocol: a classical version and a post-quantum version. Both protocols aim to address the challenges of securing communication in smart grids, including timeliness, integrity, confidentiality, and scalability.

3.1 Classical ADA Protocol (PSK-ADA)

This protocol utilizes a pre-shared key (PSK) for initial authentication and establishes a secure communication channel. Key steps include:

• Initial Handshake: Devices authenticate using a shared PSK and exchange public keys for a Diffie-Hellman key exchange.
• Key Agreement: ECDH (Elliptic Curve Diffie-Hellman) is used to derive a session key.
• Secure Communication: Authenticated Encryption with Associated Data (AEAD) and Message Authentication Codes (MAC) are employed to ensure confidentiality and integrity of data transmission.
• Identity Preservation: The protocol preserves the identity of communicating devices, addressing a limitation of standard TLS implementations.

3.2 Certificate-Based ADA Protocol (Cert-ADA)

This variant leverages digital certificates issued by a trusted authority for authentication, eliminating the need for a pre-shared key. It builds upon the classical protocol, replacing the PSK-based authentication with digital signatures.

3.3 Post-Quantum Variants

Recognizing the threat posed by quantum computers, the team developed post-quantum versions of both protocols. These variants replace vulnerable cryptographic primitives (ECDH) with quantum-resistant alternatives:

• Key Exchange: Key Encapsulation Mechanisms (KEMs) like Kyber are used instead of ECDH.
• Digital Signatures: FIPS 203 and FIPS 204 signatures are used instead of ECDSA.
• AEAD: ASGCM256 is used as a quantum-resistant AEAD scheme.

4. Experimental Evaluation & Performance Results

The protocols were implemented and tested using Arduino PLCs and desktop computers. Results demonstrated:

• Classical Protocols: The PSK-ADA protocol outperformed TLS in terms of latency, even on resource-constrained devices like Arduino PLCs.
• Post-Quantum Protocols: The post-quantum variants, while exhibiting slightly higher latency due to larger key sizes, still outperformed TLS with post-quantum cryptography.
• Latency: Latency overhead with the classical protocols remained below 5 milliseconds, preserving real-time operation.
• Performance Trade-offs: The certificate-based approach introduced slightly higher overhead due to the digital signature process.

5. Key Arguments & Perspectives

• Communication Infrastructure is Critical: Securing the communication infrastructure is paramount for overall smart grid security.
• Legacy Systems Pose Challenges: Integrating security into existing systems with legacy devices requires careful consideration of resource constraints and compatibility.
• Quantum Threat is Real: The potential for quantum computers to break current cryptographic algorithms necessitates a proactive transition to post-quantum cryptography.
• Hybrid Approaches are Realistic: A phased approach combining classical and post-quantum cryptography may be the most practical solution in the near term.
• Collaboration is Essential: Effective smart grid security requires collaboration between academia, government, and industry.

6. Notable Quotes

• “The smart grid is not just an electrical network anymore. It is a cyber physical system.” – Shabnam Sari
• “We need to keep in mind that these devices some of the devices that actually are in the grid and the operational technology they are resource constraint devices.” – Shabnam Sari
• “Adversaries now target communication, timing, relay coordinations, firmware integrity.” – Shabnam Sari (regarding emerging threats)

7. Future Research Directions

Shabnam Sari expressed interest in exploring:

• Adaptive Security: Developing security mechanisms that dynamically adjust to changing threat landscapes.
• AI-Powered Security: Leveraging AI for anomaly detection, intrusion prevention, and decision support.
• Post-Attack Recovery: Developing strategies for restoring grid functionality after a cyberattack.
• Integration of IT and OT Security: Bridging the gap between traditional IT security and the unique requirements of operational technology.

8. Conclusion

The research presented demonstrates the feasibility of developing secure and efficient communication protocols for smart grids. The proposed ADA protocols, both classical and post-quantum, offer a promising path towards enhancing the resilience and security of critical infrastructure. Addressing the challenges of legacy systems, the quantum threat, and the need for collaboration will be crucial for realizing the full potential of a secure and sustainable smart grid.