Smart The Grid Track C Security Session 1 10:50 AM 1

Smart The Grid Smart Grid Interim Roadmap Document Review Session One Document Review April 28,

Smart The Grid Guidelines and Info for Sessions Nominate scribe Time is precious – keep on schedule; avoid getting lost in weeds News Media is present in sessions No electronic recording of sessions Note: This workshop is a draft in progress Key findings will be posted outside the room 3

Smart The Grid Session One Objectives Build consensus on the vision of the Smart Grid Build consensus on the partitioning of the Smart Grid Review the Draft Smart Grid Roadmap Summary of events 4

Smart The Grid Introductions Chair: Annabelle Lee – Senior Cyber Security Strategist for NIST Computer Security Division and Chair of NIST Cyber Security Coordination Task Group Co-chair: Matt Carpenter – Senior Security Analyst for InGuardians Security Testing of Smart Grid and SCADA; SANS Instructor; Red Team Lead 5

Smart The Grid Defining Terms Cyber Security Security Framework Architecture 6

Smart The Grid External Corporations Corporate Utility Market participants IntelliGrid Environments 7

Smart The Grid Utility Structure vs. Smart Grid Interfaces Market / Regulatory Corporate Transmission Distribution Consumer/Load Field Area (FAN) Home or Premise Area (HAN) Wide Area (WAN) Enterprise (ESB) Extranet Note: Energy sources can be found in T, D, or C 8

Smart The Grid Roadmap Outline (DRAFT) – Top Level (Discussion and Comments on Overall Roadmap Structure) EXECUTIVE SUMMARY 1.PURPOSE AND SCOPE 2.SMART GRID VISION 3.SMART GRID HIGH-LEVEL ARCHITECTURE 4.SMART GRID APPLICATIONS AND USER REQUIREMENTS 5.SMART GRID ARCHITECTURE REQUIREMENTS AND INTERFACES 6.SMART GRID STANDARDS DESCRIPTION AND ASSESSMENT 7.PRIORITIZED ACTIONS AND TIMELINES TO ADDRESS IDENTIFIED ISSUES 8.DEFINITIONS 9.REFERENCES 9

Smart The Grid Roadmap Document Review Chapter 1 Purpose and Scope –1.1 Background –1.2 Context of This Document –1.3 NIST Roles and Plans 10

Smart The Grid Roadmap Document Review Chapter 2 Smart Grid Vision –2.1 What is the Smart Grid –2.2 Smart Grid Characteristics: Drivers and Opportunities –2.3 Smart Grid Challenges 11

Smart The Grid Roadmap Document Review Chapter 3 The Smart Grid High Level Architecture –3.1 Architecture Definition –3.2 Architecture Scope –3.3 Cyber Security Architecture Concepts –3.4 Architecture Destinations and Metrics –3.5 Smart Grid Development Governance –3.6 Smart Grid Interfaces –3.7 Smart Grid Infrastructure Methods and Tools –3.8 Architectural Principles –3.9 Analysis Process Methodology 12

Smart The Grid Section 3.3: Smart Grid Security Framework and Methodology April 28, 2009 link 13

Smart The Grid Security Management and Security Controls The security management for the Information Infrastructure consists of a cycle of: –Risk Assessment of the information and development of the security requirements –Security Policy establishment and selection of security controls necessary to meet the security requirements –Deployment of the selected Security Controls –Training in and enforcement of security policies and control –Auditing of the security activities –Re-assessment of the risks, vulnerabilities, and thus the revising of the security requirements and controls. NIST SP & SP

Smart The Grid Security Methodology Security methodology for Risk Assessment: –Identify Vulnerabilities in the Information Infrastructure –Assess the Impacts of security compromises With this approach, the probability of security threats actually occurring, which would be nearly impossible to quantify, is not included in the risk assessment except as an assumption that indeed these threats are real and likely in some form or another. NIST SP identifies and categorizes certain Industrial Control Systems (ICS) vulnerabilities into: –Policy and Procedure Vulnerabilities –Platform Vulnerabilities –Network Vulnerabilities –Communication Vulnerabilities Impacts are specific to particular assets and the roles they play in the Information Infrastructure 15

Smart The Grid Security Controls NIST SP identifies 17 types of security controls, categorized into 3 areas: –Security Management Planning Risk Assessment System and Services Acquisition Security Assessment and Authorization –Operational Security Awareness and Training Contingency Planning Configuration Management Media Protection Physical and Environmental Protection System and Information Integrity Personnel Security (and Safety) Maintenance Incidence Response –Technical Security Identification and Authentication Access Control System and Communications Protection Audit and Accountability 16

Smart The Grid Track C Security Session 4 8:30 AM 17

Smart The Grid Release 1 Standards - Low Hanging Fruit April 28 – 29 Smart Grid Interim Roadmap Workshop 18

Smart The Grid A Continuum of Standards 19

Smart The Grid The Smart Grid Interface Cube Information Model Application Services Security Network Management Time Synch Networking Connectivity E-Commerce Enterprise Customer (H2G, B2G, I2G) Distribution Transmission Wide-Area Situational Awareness Demand Response Electric Storage Electric Transportation Markets Distributed Generation Etc… 20

Smart The Grid Interoperability Occurs When Boxes Join Information Model Application Services Security Network Management Time Synch Networking Connectivity Enterprise Customer (H2G, B2G, I2G) Distribution Transmission Wide-Area Situational Awareness Demand Response Electric Storage Electric Transportation Markets Distributed Generation Etc… E-Commerce 21

Smart The Grid Relevant Standards Process Review strawman lists of Standards that cover the domain (and relationship to others) Group Members can add to the list of standards that need to be included Outcome: a refined initial list of standards that need to be considered for smart grid. Discussion of these standards can lead to discussion of Architecture issues relative to these standards 22

Smart The Grid Questions Are there any Candidate standards that have 100% agreement – no brainers? Are there standards that are reasonably close, but may need caveats, additions, updates, constraints, or other qualifications? What are those qualifications? Are there standards that should not be in Release 1? Are there standards not in the Candidate list that should be? 23

Smart The Grid Relevant Standards Release 1 Standards - low hanging fruit, covering assessments, interoperability issues, and gaps, including –NERC CIP 002, –IEC –AMI-SEC System Security Requirements –OpenHAN SRS –FIPS – Deals with Crypto –NIST SP (-82 “Guidance” not standard) –ISA SP99 –DHS Procurement Language for Control Systems –ISO series –Development Security Standards? (OWASP) –ANSI C12.22 / Zigbee Smart Energy Profile –IEEE i –XMPP 24

Smart The Grid Initial Candidate List Low Hanging Fruit Standards ANSI C12.19 / IEEE 1377 / MC1219 IEEE C IEC 61968/61970 (CIM) MultiSpeak IEEE 1547 BACnet – ASHRAE/ANSI 135, ISO IEC IEC TASE.2 DNP3 IEC NERC CIP NIST Security Standards – FIPS 140-1, NIST SP800-53, NIST SP800-82, etc. IEEE 802 family IETF Internet Standards – TCP/IP, VPNs, TLS, SNMP, etc. IEC PAS

Smart The Grid Group Discussion Are there any Candidate standards that have 100% agreement – no brainers? Are there standards that are reasonably close, but may need caveats, additions, updates, constraints, or other qualifications? What are those qualifications? Are there standards that should not be in Release 1? Are there standards not in the Candidate list that should be? 26

Smart The Grid Track C Security Session 3 1:00 PM 27

Smart The Grid Smart Grid Security Frameworks, Methodologies and Architecture April 28 – 29 Smart Grid Interim Roadmap Workshop 28

Smart The Grid Security Approach Security Frameworks Security Methodologies Security Architecture 29

Smart The Grid Scope of Session 2 Discussion of security methodologies and security frameworks –NIST SP – Industrial Control Systems –NIST SP – Federal Systems Security Controls –NIST SP – Risk Management Security Architecture documents 30

Smart The Grid Questions What aspects of the documents presented are good/useful/adequate for security of the Smart Grid? What aspects are not adequate? Are there other documents that address them? What should the security framework for the Smart Grid include? What should the methodology be for Risk Assessment, e.g. assessing only the vulnerabilities and the impacts, rather than the likelihood of any threats? What should security management of the Smart Grid entail, particularly as new, often untrusted Stakeholders interconnect? 31

Smart The Grid Considerations Legacy Systems Evolving Standards Others? 32

Smart The Grid Track C Security Session 4 8:30 PM 33

Smart The Grid Smart Grid Vulnerabilities and Impacts April 28 – 29 Smart Grid Interim Roadmap Workshop 34

Smart The Grid Session 3: Architecture Requirements Identifying vulnerabilities and impacts to the Smart Grid, which are critical to moving forward on the security architecture 35

Smart The Grid External Corporations Corporate Utility Market participants IntelliGrid Environments 36

Smart The Grid Vulnerability Goals: * Plan to move forward with Roadmap Document * Volunteers * Identify Vulnerabilities and Impacts * Incomplete and/or Inappropriate Policy and Mutual Dis-trust and Defense-in-depth Procedures * Configuration Management * Testing/Assessment * Logging and Monitoring * Incident Response Procedures and Training 37

Smart The Grid Identity Entity (Actor) Authentication –Devices to devices –Users to devices –Device to network –Host to device –User to Service/Application –Etc., etc. Authorization Configuration 38

Smart The Grid * Platform Misconfiguration * IDS/IPS not installed, configured or updating * Firewall * Default Configuration * Unecessary Services Running * Incomplete or Inappropriate Patch Management * Incomplete or No patching process * Patching process not followed regularly 39

Smart The Grid Platform Hardware Vulnerabilities * Underlying Architecture Flaws * Underlying Design Flaws * Hardware Failure * Inadaquate Physical Protections (Physical Vulnerability as a primary heading?) * Loss of Environmental Control 40

Smart The Grid * Platform Software Vulnerabilities * Design Flaws * Race Conditions * Weak Authentication * Weak Authorizations * Implementation Flaws (Programmer Error) * Buffer Overflows * Integer over/underruns * Misconfiguration * AV 41

Smart The Grid * Network Vulnerabilities * Weak Network Security Architecture * Network Configuration * Lack of, or Inappropriate Access-Controls * Network Hardware * Network Perimeter * Communication * Clear-text Communications * Proprietary Protocols * Wireless Connection 42

Smart The Grid Questions Can a security architecture be developed based on the general or well-known requirements or are the detailed security requirements in the critical path? What are the general or well-known security requirements? What are the key vulnerabilities? What are the key impacts? What additional requirements are needed beyond vulnerabilities and impacts? 43

Smart The Grid Track C Security Session 5 10:20 AM 44

Smart The Grid Identified Issues, Prioritized Actions and Timelines April 28 – 29 Smart Grid Interim Roadmap Workshop 45

Smart The Grid Session 5 – Prioritized Actions and Timelines Objective: Identify Areas of follow-on work necessary to include in the roadmap 46

Smart The Grid Process Define Areas of work that need to get done to further the development of the smart grid for the domain. This includes the processes to develop a set of “National Level Architecture Requirements” The following are examples of follow on work that could seed domain discussions on the topic. –Use Cases/Application requirements to be developed –Analyses necessary including Architecture Requirements, Actor and nomenclature normalization –Integration and Harmonization of Standards that need to take place –Reference Designs and Implementations that are needed to assist the development and integration of the standards –RD&D topics and projects that need to be developed. 47

Smart The Grid Questions What are the issues that should be included in the list of actions? What actions should be taken on each of these issues? What is the proposed timeline for these actions, given the need to involve SDOs, additional Stakeholders, and the constraints of the up-coming May Workshop? 48