IoTSec Project Meeting 2Dec2015

Security in IoT for Smart Grid - IoTSec.no

http://www.IoTSec.no, #IoTSec, #IoTSecNO

Bernt A. Bremdal, Bjarne Tarjei Haugen, Christian Johansen, Dang Ha The Hien, Davide Roverso, Dieter Hirdes, Einar Snekkenes, Erik Åsberg, Habtamu Abie, Heidi Tuiskula, Iñaki Garitano, Jan Pedro Tumusok, Jayaprakash Rajasekharan, Josef Noll, Ketil Johansen, Knut Johansen, Leif Nilsen, Linda Firveld, Olaf Owe, Ole Gabrielsen, Otto Andreas Rustand, Paal Engelstad, Seraj Fayyad, Stein Gjessing, Stian Løvold, Vidar Kristoffersen, Yan Zhang, Åsmund Skomedal

Nov 2015, Josef NollIoTSec.no #IoTSecNO

Knowledge and collaboration space http://IoTSec.no - #IoTSec, #IoTSecNO

2

KjellerOslo

Gjøvik

Halden

«Open World Approach» everything that is not declared closed

is open

Nov 2015, Josef NollIoTSec.no #IoTSecNO

How come these guys didn’t think of security?

3

11 ©2007 Deloitte & Touche GmbH WirtschaftsprüfungsgesellschaftWeb 2.0 Expo Berlin 2007

How come these guys didn’t think of that?

Source: http://www.michaelkaul.de/History/history.html

1973 Kjeller

Jon Postel

Steve Crocker

Vinton Cerf1972• The building where the Internet (Arpanet)

came to Europe in June 1973

.... and the Internet

Nov 2015, Josef NollIoTSec.no #IoTSecNO

The threat dimension! Hollande (FR), Merkel (DE) had their mobile

being monitored ! «and we believe it is not happening in Norway?

4

[source: www.rediff.com]

[source: Süddeutsche Zeitung, 18Dec2014]

Nov 2015, Josef NollIoTSec.no #IoTSecNO

The Smart Grid in the close future! Smart grid with prosumers ! various control mechanisms ! attack scenarios ! critical infrastructure

5

Wind farm

Solar farm

Energystorage Distribution

substation

Industrialcustomer

Residential customers

Microgrid

Smart data

control &

management

Energyagent

battery

Intrusionprotection

Nov 2015, Josef NollIoTSec.no #IoTSecNO

Internet of Things Security

6

Nov 2015, Josef NollIoTSec.no #IoTSecNO

#IoTSecNO, #IoTSec IoTSec.no facts

! Research Initiative: Security in IoT for Smart Grids – applicable for Internet of Things (IoT) – focussed on Smart Grid security

! Facts – 1Oct2015 - 30Sep2020, 32 MNOK budget (25 MNOK NFR) – 10 founding partners, – 18 partners (Nov2015)

! Main outcome – Research in Security for Smart Grid – Industrial Smart Grid Security Centre

7

Nov 2015, Josef NollIoTSec.no #IoTSecNO

Partners ! Founding partners

➡ University of Oslo (UiO) through the Institute for Informatics (Ifi) and the University Graduate Centre (UNIK),

➡ Norwegian Computing Centre (NR) ➡ Simula Research Laboratory (SRL) ➡ Gjøvik University College ➡ NCE Smart Energy Markets (NCE Smart) ➡ eSmart Systems (eSmart) ➡ Frederikstad Energi (FEN) ➡ EB Nett (EB) ➡ Movation (MOV)

! Associated Academic Members ➡ Mondragon Unibersitatea, Spain ➡ University of Victoria, Canada ➡ Universidad Carlos III de Madrid, Spain ➡ University of Roma La Sapienza, Italy

! Associated Industrial Members ➡ Mondragon Unibersitatea, Spain ➡ Fredrikstad kommune ➡ EyeSaaS ➡ Nimbeo ➡ H2020 and ECSEL projects

! COINS Academic Research School8

KjellerOslo

Gjøvik

Halden

Nov 2015, Josef NollIoTSec.no #IoTSecNO

Research Topics! Tailoring «security challenges» to targeted research ! Security in IoT Ecosystem

! Semantic modelling and provability ! Measurable Security, Privacy and Dependability ! Adaptive security

Operational requirements ! Operational security ! Forecast mechanisms ! Operation Centre (from Smart Grid to Smart City)

9

Nov 2015, Josef NollIoTSec.no #IoTSecNO

Example of Research: Multi-Metrics - system composition

! System consists of sub-systems consists of components ! security ! privacy ! dependability

! Computer analysis

10

sub-system 2(s,p,d)

Comp. 1 Comp. 2 Comp. 3

Multi-MetricsMM

M

sub-system 1(s,p,d)

system(s,p,d)

Multi-Metrics (weighted subsystems) ideal

good accep.

critical

failure

criticality

Nov 2015, Josef NollIoTSec.no #IoTSecNO

Ecosystem for Innovasjon

11

Data

Applications - smart grid - health,….

incentives

choice

Pilot

who owns the data?

Data

Data

Security, privacy awareness

protect

detect react

Policies (security, admission,..)

procedures

Normdannelse

Arena

Fremtidens forretningsmuligheter

procedures, policies

Nov 2015, Josef NollIoTSec.no #IoTSecNO

Conclusions! Internet of Things (IoT) is a game changer

! Unfair advantage in the Nordics ! Autonomous systems, Critical Infrastructure

! Collaborative approach for a (more) secure society ! trust is not enough, need for measurable ! partnership for security: threats, measures, counter

activities ! Measurable Security and Privacy for IoT

! IoTSec.no - Security for Smart Grid ! Dependable access ! Industrial impact: Security Centre for Smart Grid

! Innovation ecosystem with security and privacy ! Pilots for Procedures, Norms & Policies

! Join us for a more secure Innovation Ecosystem

12

[Source: Monique Morrow, Cisco]

ideal

good accep.

critical

failure

criticality

Aca

Publi

Entrep

ConsBusi

Sen

IoT -

infrastructure:

Creative

Nov 2015, Josef NollIoTSec.no #IoTSecNO 13

Interested to join our Initiative?

- contact one of the partners

- call, SMS 9083 8066, @IoTSecNO