Journal of the Korea Institute of Information Security & Cryptology (정보보호학회논문지)

Korea Institute of Information Security and Cryptology (한국정보보호학회)
권호 표지
DOI QR코드

DOI QR Code

A Study on Smart Grid and Cyber Security Strategy

지능형 전력망 도입과 사이버보안 전략

  • Received : 2011.03.24
  • Accepted : 2011.06.15
  • Published : 2011.10.31
Download PDF
⟨ Previous Next ⟩

Abstract

Smart Grids are intelligent next generating Electric Power System (EPS) that provide environment-friendliness, high-efficiency, and high-trustworthiness by integrating information and communication technology with electric power technology. Smart grids help to supply power more efficiently and safely than past systems by bilaterally exchanging information between the user and power producer. In addition, it alleviates environmental problems by using renewable energy resources. However, smart grids have many cyber security risks because of the bilateral service, the increase of small and medium-sized energy resources, and the installation of multi-sensors or control devices. These cyber risks can cause critical problems within a national grid through even small errors. Therefore, in order to reduce these risks, it is necessary to establish a cyber security strategy and apply it from the developmental stage to the implementation stage. This thesis analyzes and recommends security strategy in order to resolve the security risks. By applying cyber security strategy to a smart grid, it will provide a stepping-stone to creating a safe and dependable smart grid.

지능형 전력망은 전력기술에 정보통신 기술을 접목하여 친환경, 고효율, 고신뢰의 지능화된 차세대 전력시스템이다. 이는 종래의 전력 네트워크와는 달리 수용가 및 전력 생산자와 전력망 운영 주체 사이의 양방향 정보 교환을 통해 보다 안정적이고 효율적으로 전력을 공급하도록 한다. 또한 재생 에너지원을 전력계통 운영에 포함시킴으로써 환경문제에도 도움을 준다. 하지만 지능형 전력망은 양방향 서비스, 중 소규모 에너지원의 증가, 다량의 센서 및 제어기기의 설치 등으로 많은 사이버 보안 위협을 지닌다. 이러한 사이버 위협은 한 번의 실수로 큰 피해를 입게 되는 국가전력망에 있어서 치명적인 문제가 된다. 따라서 이러한 사이버 보안 위협을 해소하기 위해 지능형 전력망의 사이버보안 전략을 수립하고, 이를 개발 단계에서부터 실제 도입단계에 이르는 전 과정에서 적용해야 한다. 본 논문에서는 지능형 전력망의 사이버 보안 위협을 분석하고 이를 해소할 수 있는 지능형 전력망에 필요한 사이버 보안전략을 제안한다. 사이버 보안전략을 지능형 전력망에 적용함으로써 안전하고 신뢰성 있는 지능형 전력망 구축의 초석이 될 것으로 기대된다.

Keywords

References

  1. U.S. Department of Energy, "The Smart Grid: An Introduction," DoE Report, pp.10-12, Apr. 2009
  2. U.S. Department of Energy, "Grid 2030: A National Vision for Electricity's Second 100 Years," DoE Report, pp.17, Jul. 2003.
  3. K. Moslehi, A.B.R. Kumar, H.D. Chiang, M. Laufenberg, A. Bose, P. Hirsch, and L. Beard, "Control Approach for Self-Healing Power Systems: A Conceptual Overview," Conference Proceeding, Carnegie Mellon University, pp.1-3, Dec. 2004.
  4. S. Borenstein, M. Jaske, and A. Rosenfeld, "Dynamic Pricing, Advanced Metering, and Demand Response in Electricity Markets," Report, University of California Energy Institute, pp.39-41, Oct. 2002.
  5. National Energy Technology Laboratory( NETL) for the U.S Department of Energy, "A Vision for the Modern Grid," NETL Report, pp.5, Mar. 2007.
  6. 이창훈, "스마트그리드 촉진법에 관한 입법학적 고찰," 한국전기산업연구원(자체성과과제, 2010-02), pp.1-19, 2010년 12월
  7. E.W. Gunther, A. Snyder, G. Gilchrist, and D. R. Highfill, "Smart Grid Standards Assessment and Recommendations for Adoption and Development," EnerNex Corporation Report, pp.9-12, Feb. 2009
  8. 안기봉.한태환, "스마트그리드(지능형 전력망)와 스마트 세대분전반," 조명.전기설비 학회지 제23권 제4호, pp.2-4, 2009년 8월
  9. UK Department of Trad and Industry, "Meeting the Energy Challenge: A White Paper on Energy," DTI Report, pp.14-15, May 2007.
  10. J. Tomic and W. Kempton, "Using Fleets of Electric-drive Vehicles for Grid Support," Journal of Power Sources, Elsevier, Vol. 168, Iss. 2, pp.459-468, Jun. 2007. https://doi.org/10.1016/j.jpowsour.2007.03.010
  11. 박남제.안길준, "스마트 그리드에서의 프라이버시보호," 정보보호학회지 20(3), pp.64-65, 2010 년 6월
  12. A. Battaglini, J. Lilliestam, C. Bals, and A. Haas, "The SuperSmart Grid," Report, European Climate Forum, pp.5-7, Jun. 2008.
  13. K.R. Nahingian, "The Smart Alternative: Securing and Strengthening Our Nation's Vulnerable Electric Grid," Report, The Reform Institute, pp.3-7, Jun. 2008
  14. Smart Grid: Fewer Blackouts, More Greenbacks For The Northwest http://www.electricnet.com/article.mvc/Smart-Grid-Fewer-Blactouts-More-Greenbacks-Fo-0001
  15. 지식경제부 보도자료, '스마트그리드 국가로드맵', 2010년 1월
  16. P. Haase, "IntelliGrid: A Smart Network of Power," EPRI Journal, pp.27-32, Fall 2005
  17. L.D. Kannberg, D.P. Chassin, J.G. DeSteese, S.G. Hauser, M.C. Kintner- Meyer, R.G. Pratt, L.A. Schienbein, and W.M. Warwick, "$GridWise^{TM}$: The Benefits of a Transformed Energy System," Report, Pacific Northwest National Laboratory, pp.11-23, Sep. 2003
  18. Xcel Energy Inc., "Xcel Energy Smart Grid," White Paper, pp.9-12, Feb. 2008.
  19. CITRIS(Center for Information Technology Research in Internet Society), http://www.citris-uc.org/
  20. Power and Energy Systems/Department of Electrical & Computer Engineering http://energy.ece.illinois.edu/
  21. 전력IT 사업단(한국스마트그리드사업단으로 개편), http://www.smartgrid.or.kr
  22. 한국에너지자원기술기획평가원, "Grid2030 vision", 보고서, pp.3-5, 2009년 4월 http://www.oe.energy.gov/smartgrid.htm
  23. National Energy Technology Laboratory( NETL) for the U.S Department of Energy, "The Modern Grid Strategy", NTEL Report, pp.2-5, Aug. 2009
  24. F. Sissine, "Energy Independence and Security Act of 2007: A Summary of Major Provisions," CRS Report for Congress, Dec. 2007.
  25. European Commission, "European Technology Platform SmartGrids: Vision and Strategy for Europe's Electricity Networks of the Future", EU Report, EUR 22040, pp.6-7, Apr. 2006
  26. European Commission, "European Technology Platform SmartGrids: Strategic Research Agenda for Europe's Electricity Networks of the Future", EU Report, EUR 22580, pp.29-71, Apr. 2007
  27. 녹색성장위원회, 녹색성장 국가전략 및 5개년계획, pp.21-26, 2009년 7월
  28. 최재덕.서정택.이철원, " 제주 스마트그리드 실증단지 보안대책 현황," 정보보호학회지 20(5), pp.14-18, 2010년 10월
  29. http://www.forbes.com/2007/08/22/scada-hackers-inrastructure-tech-security-cx_ag_0822hack.html
  30. Critical infrastructure protection: Challenges and efforts to secure control systems(GAO-04-354). GAO(Government Accountability Office), Report, May 2004
  31. TVA Power Plants Vulnerable to Cyber Attacks, GAO Finds http://www.washingtonpost.com/wp-dyn/content/article/2008/05/20/AR2008052002354.html
  32. Mouse click could plunge city into darkness, experts say http://edition.cnn.com/2007/US/09/27/power.at.risk/index.html
  33. Cyber Incident Blamed for Nuclear Power Plant Shutdown http://www.washingtonpost.com/wp-dyn/content/article/2008/06/05/AR2008060501958.html
  34. CIA: Hackers demanding cash disrupted power http://www.msnbc.msn.com/id/22734229/
  35. Electric Utilities May Be Vulnerable to Cyberattack http://www.washingtonpost.com/wp-dyn/content/article/2009/04/08/AR2009040803904.html?referrer=emailarticle
  36. Electricity Grid in U.S. Penetrated By Spies http://online.wsj.com/article/SB-123914805204099085.html
  37. http://www.etnews.co.kr/news/detail.html?id=200903240003
  38. http://www.wired.com/threatlevel/2009/05/efh/
  39. http://www.economi.co.kr/bbs/board.php?bo_table=NI001&wr_id=302
  40. 지식경제부 사이버안전센터, 연간 침해사고 탐지현황 자료, 2011년 3월
  41. 이경복.독고지은.유지연.이숙연.임종인, "스마트그리드에서의 소비자 참여와 보안 이슈," 정보보호학회지 19(4), pp.25-30, 2009년 8월
  42. M. Abrams and J. Weiss, "Malicious Control System Cyber Security Attack Case Study-Maroochy Water Services, Australia," Report, NIST Computer Security Division, pp.2-12, Aug. 2008.
  43. Juniper Networks Inc., "Architecture for Secure SCADA and Distributed Control System Networks," White Paper, pp.2-9, Feb. 2009.
  44. Y. Wang and B.T. Chu, "sSCADA: Securing SCADA Infrastructure Communications," Cryptology ePrint Archive, pp.1-12, Aug. 2004.
  45. R.J. Robles, M. Choi, E. Cho, S. Kim, G. Park, and S. Yeo, "Vulnerabilities in SCADA and Critical Infrastructure Systems," International Journal of Future Generation Communication and Networking, pp.99-104, Dec. 2008.
  46. US-CERT, "Control Systems Security Program - Vulnerability Notes," 2009, http://www.us-cert.gov/control_systems/csdocuments.html.
  47. DNP Users Group, "A DNP3 Protocol Primer", Report, pp.1-7, Mar. 2005.
  48. IEC TC57 WG7, "Telecontrol Equipment and Systems - Part 6-505: Telecontrol Protocols Compatible with ISO Standards and ITU-T Recommendations - TASE.2 User Guide," IEC TR 60870-6-505, Dec. 2006.
  49. Modbus IDA, "Modbus Application Protocol Specification V1.1b," Report, pp.3-12, Dec. 2006.
  50. 이명훈.배시화.손성용, "전력IT기반 파워그리드 실증 보안 체계 설계," 한국해양정보통신학회논문지 14(11), pp.2498-2504, 2010년 12월
  51. 이건희.서정택.이철원, "스마트그리드 사이버 보안 추진 현황," 정보보호학회지 20(5), pp.9-11, 2010년 10월