An Information Security Model for an IoT-enabled Smart Grid

Abstract

The evolution of an Internet of Things-enabled Smart Grid affords better automation, communication, monitoring, and control of electricity consumption. It is now essential to supply and transmit the data required, to achieve better sensing, more accurate control, wider information communication and sharing, and more rational decision-making. However, the rapid growth in connected entities, accompanied by the increased demand for electricity, has resulted in several challenges to be addressed. One of these is protecting energy information exchange proactively, before an incident occurs. It is argued that Smart Grid systems were designed without any regard for security, which is considered a serious omission, especially for data security, energy information exchange, and the privacy of both the consumers and utility companies. This research is motivated by the gap identified in the requirements and controls for maintaining cybersecurity in the bidirectional data flow within the IoT-enabled Smart Grid. The initial stages of the research define and explore the challenges and security requirements, through the literature and industrial standards. The Threat Modelling identified nine internet-based threats. The analysis proposes a security model which includes 45 relevant security controls and 7 security requirements.