Abstract
In this paper, an approach using the European Smart Grid Architecture Model (SGAM) in the context of the NISTIR 7628 is presented. Research has shown that both models and methodologies have particular impact, but have not yet been put into mutual context. The combination of these models makes it possible for US Smart Grid experts to reuse the SGAM model and its benefits, and vice versa, European stakeholders are encouraged to use the security analysis framework from NIST. Within this paper, we briefly introduce the methodologies including their strengths and fallbacks. We outline the necessity to make them interoperable and aligning them. Finally, the logical interface framework from NISTIR 7628 is mapped onto the SGAM and its planes, domains and zones, bridging the existing gap. In addition to those results, we outline the need for a future integration with a maturity model for security assessment and point out a roadmap and preliminary results.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
CEN-CENELEC-ETSI: Smart Grid Coordination Group: Smart Grid Reference Architecture (2012).
CEN-CENELEC-ETSI Joint Working Group: Final report of the CEN/CENELEC/ETSI Joint Working Group on Standards for Smart Grids (2011).
Dänekas, C., Engel, D., Neureiter, C., Rohjans, S., Trefke, J., Uslar, M.: Durchgängige Werkzeugunterstützung für das EU-Mandat M/490: Vom Anwendungsfall bis zur Visualisierung. Tagungsband VDE-Kongress 2014, Frankfurt (2014).
Englert, H., Uslar, M.: Europäisches Architekturmodell für Smart Grids – Methodik und Anwendung der Ergebnisse der Arbeitsgruppe Referenzarchitektur des EU Normungsmandats M/490. Tagungsband VDE-Kongress 2012, Stuttgart (2012).
European Commission: M/490 Standardization Mandate to European Standardisation Organisations (ESOs) to support European Smart Grid deployment (2011).
International Electrotechnical Commission (IEC): IEC 62351 Part 1–11, Power systems management and associated information exchange – Data and Communication Security (2007–2013).
International Electrotechnical Commission (IEC): IEC/PAS 62559 ed. 1.0-IntelliGrid Methodology for Developing requirements for Energy Systems (2008).
National Institute of Standards and Technology (NIST): The Smart Grid Interoperability Panel – Cyber Security Working Group: NISTIR 7628 – Guidelines for Smart Grid Cyber Security vol. 1–3 (2010).
Neureiter, C., Eibl, G., Engel, D., Schlegel, S., Uslar, M.: A concept for Engineering Smart Grid Security Requirements based on SGAM models. Computer Science-Research and Development, Springer, Berlin Heidelberg (2014).
OFFIS: DISCERN Deliverable (D) no. 3.5: IT security concept (2014).
Rohjans, S., Uslar, M., Bleiker, R., Gonzalez, J.M., Specht, M., Suding, T., Weidelt, T.: Survey of Smart Grid Standardization Studies and Recommendations. First IEEE International Conference on Smart Grid Communications, Gaithersburg (2010).
Rosinger, C.: Informationssicherheit im Smart Grid. IT-Architekturentwicklung im Smart Grid, Springer, Berlin Heidelberg (2012).
Schlegel, S., Rosinger, C., Uslar, M.: Aligning IT architecture analysis and security standards for Smart Grids. Proceedings of the 28th Conference on Environmental Informatics – Informatics for Environmental Protection, Sustainable Development and Risk Management (2014), http://oops.uni-oldenburg.de/1919/1/enviroinfo_2014_proceedings.pdf
SMB Smart Grid Strategic Group (SG3): IEC Smart Grid Standardization Roadmap (2010).
Suhr, A., Rosinger, C., Honecker, H.: System Design and Architecture – Essential Functional Requirements vs. ICT Security in the Energy Domain. Internationaler ETG-Kongress, Berlin (2013).
Trefke, J., Gonzalez, J., Dänekas, C.: IEC/PAS 62559-Based Use Case Management for Smart Grids. Standardization in Smart Grids, Springer, Berlin Heidelberg (2013).
US Department of Energy, US Department of Homeland Security: Electricity Subsector Cybersecurity Capability Maturity Model (ES-C2M2) (2014).
Uslar, M., Rosinger, C., Schlegel, S.: Application of the NISTIR 7628 for Information Security in the Smart Grid Architecture Model (SGAM). Tagungsband VDE-Kongress, Frankfurt (2014).
Uslar, M., Rosinger, C., Schlegel, S.: Security by design for the Smart Grid: Combining the SGAM and NISTIR 7628. IEEE 38th International Computer Software and Applications Conference Workshops (COMPSAC), Västerås (2014).
Uslar, M., Schmedes, T., Lucks, A., Luhmann, T., Winkels, L., Appelrath, H.J.: Interaction of EMS related systems by using the CIM standard, Springer, Berlin (2005).
Uslar, M., Specht, M., Dänekas, C., Trefke, J., Rohjans, S., Gonzalez, J., Rosinger, C., Bleiker, R.: Standardization in Smart Grids: Introduction to IT-Related Methodologies, Architectures and Standards. Springer, Berlin (2013).
Acknowledgement
The research leading to these results has received funding from the European Union Seventh Framework Programme (FP7/2007-2013) under grant agreement No. 308913 – DISCERN and additionally under grant agreement No. 609687 -ELECTRA.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2016 Springer International Publishing Switzerland
About this chapter
Cite this chapter
Uslar, M., Rosinger, C., Schlegel, S., Santodomingo-Berry, R. (2016). Aligning IT Architecture Analysis and Security Standards for Smart Grids. In: Marx Gomez, J., Sonnenschein, M., Vogel, U., Winter, A., Rapp, B., Giesen, N. (eds) Advances and New Trends in Environmental and Energy Informatics. Progress in IS. Springer, Cham. https://doi.org/10.1007/978-3-319-23455-7_7
Download citation
DOI: https://doi.org/10.1007/978-3-319-23455-7_7
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-23454-0
Online ISBN: 978-3-319-23455-7
eBook Packages: Business and ManagementBusiness and Management (R0)