IRRIIS-FP6-2005–IST-4

IRRIIS Project Overview

3rd Public IRRIIS WorkshopSeptember 6, 2007, Bonn, Hotel Königshof

Erich Rome, FhG-IAIS

IRRIIS

IRRIIS Vision

To enhance substantially the dependability of

(Large Complex) Critical Infrastructures

by introducing appropriate

Middleware Improved Technology (MIT)

components.

Integrated Risk Reduction ofInformation-based Infrastructure Systems

IRRIIS

IRRIIS Focus

Information and Communication Technology (ICT) underpins all CIs (Inter-)Dependencies between CIs are not well understood up to now Danger of cascading, escalating or common cause failures

Dependencies /

Interdependencies

IRRIIS

IRRIIS Proceeding

Diagnosis - Therapy

IRRIIS

IRRIIS Proceeding

Analysis & Research

Diagnosis - Therapy

1. Analyse CI intra- and interdependenciesSurvey stakeholder’s needs

IRRIIS

Distribution Systems ClientsTransmission System

GeneratorsQualifiedClientsIPP

TradingCompanies

MarketOperat

or

SystemOperator

Private Communications Network

Public Communications Network

Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain

Example: DependenceElectricity & Telecommunication

Power grid biased view

IRRIIS

Example: DependenceElectricity & Telecommunication

System operator’s tasks

Operation planning: Day or week ahead Security Analysis

Generation Program validation

Transmission System Maintenance Schedule

Ancillary Services Planning and Procurement: System Reserves: Primary – Secondary – Tertiary

Voltage Profile and Control requirements

IRRIIS

Distribution Systems ClientsTransmission System

GeneratorsQualifiedClientsIPP

TradingCompanies

MarketOperat

or

SystemOperator

Private Communications Network

Public Communications Network

Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain

Example: DependencyElectricity & Telecommunication

Operation Planning

IRRIIS

Example: DependenceElectricity & Telecommunication

Real-time Operation: Real Time System Control

Real Time Network Security

Ancillary Services Operation: System Restoration and Black Start Voltage and Frequency Control Interchanges Control

IRRIIS

Distribution Systems ClientsTransmission System

GeneratorsQualifiedClientsIPP

TradingCompanies

MarketOperat

or

SystemOperator

Private Communications Network

Public Communications Network

Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain

Example: DependencyElectricity & Telecommunication

Real-time Operation

IRRIIS

Example: DependenceElectricity & Telecommunication

Energy and service management: Ancillary Services Settlement

Energy metering

IRRIIS

Distribution Systems ClientsTransmission System

GeneratorsQualifiedClientsIPP

TradingCompanies

MarketOperat

or

SystemOperator

Private Communications Network

Public Communications Network

Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain

Example: DependencyElectricity & Telecommunication

Energy Management

IRRIIS

Distribution Systems ClientsTransmission System

GeneratorsQualifiedClientsIPP

TradingCompanies

MarketOperat

or

SystemOperator

Private Communications Network

Public Communications Network

Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain

Example: DependenceElectricity & Telecommunication

What happens if some of these links fail ???

IRRIIS

Full ISE Model

effect layer

service layer

implementation layer

internal

mapping : services à effect

mapping: infrastructure à services

service layer

implementation layer

internal

mapping: services à effect

mapping: infrastructure à services

global

CI 1 CI 2

IRRIIS

IRRIIS Proceeding

Analysis & Research

SimCIP Development

Diagnosis - Therapy

2. Build SimCIP simulation environment

IRRIIS

SimCIP

Agent-based simulation environment based on ISE

CI modelling with (partly) user-defined network components

Based on realistic scenarios (known blackouts)

Description of user-defined behaviour with LAMPS

(Language for Agent-based Modelling of Processes and

Scenarios)

Support for topological, Boolean, statistical analysis

Integration of existing simulators (SINCAL, QUALNET, ...)

IRRIIS

IRRIIS Proceeding

Analysis & Research

MIT Development

SimCIP Development

Diagnosis - Therapy

3. Develop appropriate MIT components to facilitate communication and mitigate negative effects

IRRIIS

Middleware Improved Technology

InternalAssessment

Physical /FunctionalIntegrity

Operation

RiskAssessment

Threats /Vulnera-bilities

MitigationActions

EmergencyManagement

Contin-gencyPlan

EmergencyHandling

InternalAssessment

RiskAssessment

EmergencyManagement

CI 1

CI 2

IRRIIS

IRRIIS Proceeding

Analysis & Research

MIT Development

SimCIP Development

Diagnosis - Therapy

4. Validate MIT components within SimCIP

IRRIIS

IRRIIS Proceeding

Analysis & Research

MIT Development

SimCIP Development

EnhancedUnderstanding

ofinterdependent

CIs

MITcomponen

ts

SimCIPenvironme

nt

Diagnosis - Therapy

5. Disseminate IRRIIS results and products

IRRIIS

IRRIIS PartnersCI StakeholderGruppo Telecom Italia Red Eléctrica de España, SpainACEA, Italy

Research PartnersItalian National Agency for New

Technology, Energy and the Environment

École Nationale Supérieure des Télécommunications, France

Centre for Software Reliability at City University London, Great Britain

Technical University Dresden, Germany

Netherlands Organisation for Applied Scientific Research

Technology Provider Alcatel, France Siemens AG, Germany Advanced Industrial Systems Ltd.,

Malta

Consultant & Service Provider Industrieanlagen-Betriebsgesellschaft

mbH, Germany Aplicaciones en Informática Avanzada,

Spain Fraunhofer Institute Intelligent Analysis

and Information Systems, Germany Fraunhofer Institute Secure

Information Technology, Germany Technical Research Centre of Finland

IRRIIS

IRRIIS Figures

Duration: 3 years Participants: 15 partners from 8 EU countries Structure: 4 subprojects; 20 workpackages Volume: 12.3 Million EUR Funding: 7 Million EUR Person Months: 900

IRRIIS

Summary:Analysis, Scenarios, Modelling, Simulation

Essential elements of the whole process are:

Formulation of focused questions for investigation

Analysis and scenario building

Knowledge elicitation and data acquisition from stakeholders

Realistic modelling on the right level of abstraction

Simulation of the modelled scenarios with and without MIT

components

Experiments and validation of the MIT components

IRRIIS

Summary

Analysis & Research

• Survey of existing tools and models

• Analysis of the state of the art (research gaps)

• Requirements for SimCIP and

MIT

• Scenario and Risk Analysis

• Topology Analysis

• Interdependency Analysis

• Analysis of Next Generation Networks

MIT Development

• Evaluation of MIT concepts

• MIT communication components to improve communication between different infrastructures

• “Intelligent” MIT add-on components for surveillance and mitigation of cascading effects

• Interfaces for easy integration into existing systems

SimCIP Development

• Agent-based simulation of CIs’ interdependencies

• Multi-layer simulation (technical, cyber, management)

• Integration of existing tools & models

• Test-bed for MIT componentsEnhancedUnderstanding

ofinterdependent

CIsMIT

components

SimCIPenvironme

nt

Diagnosis - Therapy

IRRIIS

IRRIIS Project Overview

Thank you for your attention.

IRRIIS

Critical Path Implementation Layer

Implementation: Power

control center

generator 1

generator 2

transmission line 1

transmission line 2

comm sys

distribution line 1

distribution line 2

distribution line 3power

sub stationpower

comm unit 1

comm unit 2

comm unit 3

comm unit 4

power

communication

communication

communication

communication

Implementation: TelCo

IRRIIS

CI Modelling

+Connection

NetworkElementType

+changeCurrCapacity()

+maxCapacity+currCapacity

GeneratorType

+maxLoad+currLoad

LineType

+maxCapacity+currCapacity

GeneratorType

+maxCapacity : int = 1200

NuclearPowerPlantTemplate

+changeCurrCapacity()

+maxCapacity : int = 20

WindPowerPlantTemplate

IRRIIS

LAMPS

requestedcapacity wait ready

set attribute

capacity change

process error

self

self self

Recalculate power flows

power flow sim