EU Call for Proposals: Cybersecurity in the Electrical Power and Energy System (EPES): an armour against cyber and privacy attacks and data breaches

The proposals should demonstrate how the actual EPES can be made resilient to growing and more sophisticated cyber and privacy attacks and data breaches (including personal data breaches) taking into account the developments of the grid towards a decentralised architecture and involving all stakeholders.
Applications are closed
a year ago

The Electrical Power and Energy System (EPES) is of key importance to the economy, as all other domains rely on the availability of electricity, hence a power outage can have direct impact on the availability of other services (e.g. transport, finance, communication, water supply) where backup power is not available or the power restoration time goes beyond the backup autonomy.

With the transition to a decentralised energy system, digital technologies are playing an increasingly important role in the EPES: they contribute reducing the energy consumption; they enable the integration of higher shares of renewables and promote a more energy efficient system. At the same time, with the growing use of digital devices and more advanced communications and interconnected systems, the EPES is increasingly exposed to external threats, such as worms, viruses, hackers and data privacy breaches.

Without appropriate cyber-defence measures, systems access could be violated (e.g. with the malware spreading over the system) and may cause power outages, damages and cascading effects to interconnected systems, and energy services. Therefore, with increased digitalisation, the EPES will face an increasing range of threats requiring an attentive evaluation of the cyber security risk that allows taking proper countermeasures. For example, the growing use of interconnected smart devices in the EPES will increase the number of access points (e.g. smart meters, IoT), hence increasing the exposure to cyberattacks. Also, even if security improvements may have been made since, older technologies used in legacy systems such as SCADA/ICS (Supervisory Control and Data Acquisition System/Industrial Control Systems) were designed in times when cybersecurity was not part of the technical specifications for the system design.

On the other side, a control system in the EPES that is under attack might not be easily disconnected from the network as this could potentially result in safety issues, brownouts or even blackouts. At the same time, with the decentralisation leading to a distributed energy system, microgrid operations and/or islanding could be further exploited against cyber-attacks and cascading effects in the EPES.

In order to pursue the integration of the renewables within the existing EPES and to ensure that it benefits from the advantages brought by a modern digitalised electricity grid, there is a need for new security approaches detecting and preventing threats with severe impacts and to shield the electric system against cyber-attacks. Without an adequate strategy and measures to protect the energy system from cyber-attacks, the energy transition would be more risky, more costly and possibly in danger.

Scope:

The proposals should demonstrate how the actual EPES can be made resilient to growing and more sophisticated cyber and privacy attacks and data breaches (including personal data breaches) taking into account the developments of the grid towards a decentralised architecture and involving all stakeholders. The proposals should demonstrate the resilience of the EPES through the design and implementation of adequate measures able to make assets and systems less vulnerable, reducing its expositions to cyberattacks. Different scenarios of attacks with the expected potential disruptive effects on the EPES should be envisaged and the relative counteracting measures should be designed, described, tested (sandboxing, simulations) on a representative energy demonstrator to verify effectiveness. Depending on the specific application, the proposal should apply measures to new assets or to existing equipment where data flows were not designed to be cyber protected (e.g. SCADA, ICS). The proposals shall implement the following series of activities to make the electric system cyber secure: (i) assessing vulnerabilities and threats of the system in a collaborative manner (involving all stakeholders in the energy components provision supply chain); (ii) on that basis, designing adequate security measures to ensure a cyber-secure system and describing the advantages of the solutions adopted compared to others and which aim to guarantee the level of cybersecurity and resilience vital for EPES in an evolving system; (iii) implementing both organisational and technical measures in representative demonstrator to test the cyber resilience of the system with different types of attacks/severity; and (iv) demonstrating the effectiveness of the measures with a cost-benefit analysis. The activities may include the testing of micro-grid and/or islanding as a means to reduce the vulnerability to cyber-attacks.

The proposals shall also (i) develop security information and event management system collecting logs and other security-related documentation for analysis that can also be used for information sharing across operators of essential infrastructures and CERTs; (ii) define cybersecurity design principles with a set of common requirements to inherently secure EPES; (iii) formulate recommendations for standardisation and certification in cybersecurity at component, system and process level; and (iv) propose policy recommendations on EU exchange of information.

The dimension of a pilot/demonstrator within the proposal should be at large scale level (e.g. neighbourhood, city, regional level), involving generators, one primary substation, secondary substations and end users. The proposals are encouraged to include the following types of entities: TSO, DSO, electricity generators, utilities, equipment manufacturers, aggregators, energy retailers, and technology providers.

The proposals may refer to Industry 4.0 and other proposals and/or projects dealing with cybersecurity in energy.

Projects should also foresee activities and envisage resources for clustering with other projects funded under this topic and with other relevant projects in the field funded by H2020, in particular under the BRIDGE initiative.

The outcome of the proposal is expected to lead to development up to Technology Readiness level (TRL) 7; please see Annex G of the General Annexes.

The Commission considers that proposals requesting a contribution from the EU of between EUR 6 and 8 million would allow this specific challenge to be addressed appropriately. Nonetheless, this does not preclude submission and selection of proposals requesting other amounts.

Expected Impact:

  • Built/increased resilience against different levels of cyber and privacy attacks and data breaches (including personal data breaches) in the energy sector.
  • Ensured continuity of the critical business energy operations.
  • The energy sector is better enabled to easily implement the NIS directive.
  • A set of standards and rules for certification of cybersecurity components, systems and processes in the energy sector will be made available.
  • Cyber protection policy design and uptake at all levels from management to operational personnel, in the energy sector.
  • Manufacturers providing more accountability and transparency, enabling third parties monitoring and auditing the privacy, data protection and security of their energy devices and systems.
The Deadline to submit an application: 23 August 2018 17:00:00 (Brussels time)
 
Source: The European Commission
 

Illustration Photo: Controllers at the Ivanpah Solar Project, owned by NRG Energy, Bright Source Energy,Bechtel and Google monitor systems operations and over 300,000 software-controlled mirrors that track the sun and reflect the sunlight to boilers that sit atop three 459 foot tall power towers. When the concentrated sunlight strikes the boilers’ pipes, it heats the water to create superheated steam, providing electricity to 140,000 California homes. (credits: DENNIS SCHROEDER / NREL / Flickr Creative Commons Attribution-NonCommercial-NoDerivs 2.0 Generic (CC BY-NC-ND 2.0))

Read more

Comments

No comments to display.

Related posts

Stevia Dessert Industry 2019 Market Size, Growth, Share, Trends, Global Statistics and Forecast Analysis 2025

Stevia Dessert Market 2019 Global Industry Report delivers the Stevia Dessert business profiles, participants, news, developing activities and policies, consumer volume and creating strategies. Stevia Dessert industry also report delivers analysis on a region, products, sales, revenue. Stevia Dessert market report emphases on overall development patterns, focused on key industry players, size, consumption volume, Forecast 2019 to 2025.
17 hours ago

Hula Hoop Industry 2019 Global Market Share, Growth, Manufacturers, Size, Segments and 2025 Forecast

New research report on Hula Hoop Market 2019 Global Industry includes detailed analysis market trends, innovations, growth, and forecast 2025. The report presents market main objective of sharing this market research report is to provide an in-depth analysis of the market share, historical data, profitability, opportunities, sales, and revenue distribution. The research study offers current market size, manufacturers’ analysis and segmentation of Hula Hoop across the globe.
17 hours ago

Curling Irons Industry 2019 Market Size, Growth, Share, Trends, Global Statistics and Forecast Analysis 2025

The Curling Irons Market 2019 Global Industry report consists of all the basic information regarding the Curling Irons Market. This report presents analysis of market trends, industry growth drivers, share, analysis, size, trends, and many other aspects. The global Curling Irons report is an essential reserve of data, primarily for the industry administrators.
17 hours ago

Ukulele Market 2019 Share, Industry Impacting Growth, Global Segments, Manufacturers and Forecast to 2025

The latest research report entitled Global Ukulele Market 2019 provides a detailed and complete global coverage of Ukulele Industry analysis from 2019 to 2025. The Ukulele report begins with the overview of Ukulele Industry growth, share, current situation, trend, size, and classification of the Ukulele Industry on the basis of Ukulele Market top players, key regions, and type.
17 hours ago

Termite Control Market by Species Type, Application, Region - Forecast to 2022

The termite control market was valued at USD 2.96 Billion in 2016. It is projected to grow at a CAGR of 5.6% from 2017, to reach USD 4.11 Billion by 2022.

Call for Projects: PoweredByTF 2.0 Challenge!

Use our alpha release of TensorFlow 2.0 to do something nifty: build a model, a mobile or web application, an art installation, or something else entirely! The sky is the limit - and creativity is encouraged. We're excited to see what you build!
Application Deadline in 2 months

Rising Consumer Demand for Low-Calorie and Healthier Food & Beverage Products Drives the Polyol Sweeteners Market

The polyol sweeteners market is projected to reach USD 3.30 Billion by 2022 at a CAGR of 5.9% from 2017 to 2022.

Call for Proposals: Core Infrastructure Fund to strengthen internet freedom, digital security, and the overall health of the internet

The Core Infrastructure Fund supports the ‘building block’ technologies, infrastructures, and communities relied upon by digital security and circumvention tools strengthening internet freedom, digital security, and the overall health of the internet.
Application Deadline in a month

Joint Replacement Market Comprehensive Analysis and Future Estimations 2024

Joint Replacement Market report also provides CAGR value fluctuation in percentage during the forecast period of 2019-2024 for the market.
18 hours ago