1. IRRIIS-FP6-2005–IST-4 IRRIIS Project Overview 3rd Public IRRIIS Workshop September 6, 2007, Bonn, Hotel Königshof Erich Rome, FhG-IAIS

2. IRRIIS IRRIIS Vision To enhance substantially the dependability of (Large Complex) Critical Infrastructures by introducing appropriate Middleware Improved Technology (MIT) components. Integrated Risk Reduction of Information-based Infrastructure Systems

3. IRRIIS IRRIIS Focus Information and Communication Technology (ICT) underpins all CIs (Inter-)Dependencies between CIs are not well understood up to now Danger of cascading, escalating or common cause failures Dependencies / Interdependencies

4. IRRIIS IRRIIS Proceeding Diagnosis - Therapy

5. IRRIIS IRRIIS Proceeding Analysis &Research Diagnosis - Therapy 1. Analyse CI intra- and interdependencies Survey stakeholder’s needs

6. IRRIIS Distribution Systems Clients Transmission System Generators Qualified Clients IPP Trading Companies Market Operator System Operator Private Communications Network Public Communications Network Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain Example: Dependence Electricity & Telecommunication Power grid biased view

7. IRRIIS Example: Dependence Electricity & Telecommunication System operator’s tasks Operation planning: Day or week ahead Security Analysis Generation Program validation Transmission System Maintenance Schedule Ancillary Services Planning and Procurement:  System Reserves: Primary – Secondary – Tertiary  Voltage Profile and Control requirements

8. IRRIIS Distribution Systems Clients Transmission System Generators Qualified Clients IPP Trading Companies Market Operator System Operator Private Communications Network Public Communications Network Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain Example: Dependency Electricity & Telecommunication Operation Planning

9. IRRIIS Example: Dependence Electricity & Telecommunication Real-time Operation: Real Time System Control Real Time Network Security Ancillary Services Operation:  System Restoration and Black Start  Voltage and Frequency Control  Interchanges Control

10. IRRIIS Distribution Systems Clients Transmission System Generators Qualified Clients IPP Trading Companies Market Operator System Operator Private Communications Network Public Communications Network Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain Example: Dependency Electricity & Telecommunication Real-time Operation

11. IRRIIS Example: Dependence Electricity & Telecommunication Energy and service management: Ancillary Services Settlement Energy metering

12. IRRIIS Distribution Systems Clients Transmission System Generators Qualified Clients IPP Trading Companies Market Operator System Operator Private Communications Network Public Communications Network Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain Example: Dependency Electricity & Telecommunication Energy Management

13. IRRIIS Distribution Systems Clients Transmission System Generators Qualified Clients IPP Trading Companies Market Operator System Operator Private Communications Network Public Communications Network Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain Example: Dependence Electricity & Telecommunication What happens if some of these links fail ???

14. IRRIIS Full ISE Model CI 1CI 2

15. IRRIIS IRRIIS Proceeding Analysis &Research SimCIPDevelopment Diagnosis - Therapy 2. Build SimCIP simulation environment

16. IRRIIS SimCIP Agent-based simulation environment based on ISE CI modelling with (partly) user-defined network components Based on realistic scenarios (known blackouts) Description of user-defined behaviour with LAMPS (Language for Agent-based Modelling of Processes and Scenarios) Support for topological, Boolean, statistical analysis Integration of existing simulators (SINCAL, QUALNET,...)

17. IRRIIS IRRIIS Proceeding Analysis &Research MIT Development SimCIPDevelopment Diagnosis - Therapy 3. Develop appropriate MIT components to facilitate communication and mitigate negative effects

18. IRRIIS Middleware Improved Technology Internal Assessment Physical / Functional Integrity Operation Risk Assessment Threats / Vulnera- bilities Mitigation Actions Emergency Management Contin- gency Plan Emergency Handling Internal Assessment Risk Assessment Emergency Management CI 1 CI 2

19. IRRIIS IRRIIS Proceeding Analysis &Research MIT Development SimCIPDevelopment Diagnosis - Therapy 4. Validate MIT components within SimCIP

20. IRRIIS IRRIIS Proceeding Analysis &Research MIT Development SimCIPDevelopment Enhanced Understanding of interdependent CIs MIT components SimCIP environment Diagnosis - Therapy 5. Disseminate IRRIIS results and products

21. IRRIIS IRRIIS Partners CI Stakeholder Gruppo Telecom Italia Red Eléctrica de España, Spain ACEA, Italy Research Partners Italian National Agency for New Technology, Energy and the Environment École Nationale Supérieure des Télécommunications, France Centre for Software Reliability at City University London, Great Britain Technical University Dresden, Germany Netherlands Organisation for Applied Scientific Research Technology Provider Alcatel, France Siemens AG, Germany Advanced Industrial Systems Ltd., Malta Consultant & Service Provider Industrieanlagen-Betriebsgesellschaft mbH, Germany Aplicaciones en Informática Avanzada, Spain Fraunhofer Institute Intelligent Analysis and Information Systems, Germany Fraunhofer Institute Secure Information Technology, Germany Technical Research Centre of Finland

22. IRRIIS IRRIIS Figures Duration:3 years Participants:15 partners from 8 EU countries Structure:4 subprojects; 20 workpackages Volume: 12.3 Million EUR Funding: 7 Million EUR Person Months: 900

23. IRRIIS Summary: Analysis, Scenarios, Modelling, Simulation Essential elements of the whole process are: Formulation of focused questions for investigation Analysis and scenario building Knowledge elicitation and data acquisition from stakeholders Realistic modelling on the right level of abstraction Simulation of the modelled scenarios with and without MIT components Experiments and validation of the MIT components

24. IRRIIS Summary Analysis & Research Survey of existing tools and models Analysis of the state of the art (research gaps) Requirements for SimCIP and MIT Scenario and Risk Analysis Topology Analysis Interdependency Analysis Analysis of Next Generation Networks MIT Development Evaluation of MIT concepts MIT communication components to improve communication between different infrastructures “Intelligent” MIT add-on components for surveillance and mitigation of cascading effects Interfaces for easy integration into existing systems SimCIP Development Agent-based simulation of CIs’ interdependencies Multi-layer simulation (technical, cyber, management) Integration of existing tools & models Test-bed for MIT components Enhanced Understanding of interdependent CIs MIT components SimCIP environment Diagnosis - Therapy

25. IRRIIS IRRIIS Project Overview Thank you for your attention.

26. IRRIIS Critical Path Implementation Layer

27. IRRIIS CI Modelling

28. IRRIIS LAMPS