Building resilient infrastructures for smart energy systems (abstract)

Summary form only given: Preserving the availability and integrity of the power grid cyber infrastructure in the face of fast-spreading intrusions requires advances not only in prevention and detection algorithms, but also in automated and semi-automated response techniques. In this panel presentation, we will discuss these three techniques to achieving resiliency, with particular emphasis on new techniques for detection and response. Regarding detection, we will present a new specification-based approach to intrusion detection that makes use of formal power grid protocol specifications to build provably good detectors. Regarding response, we will present emerging approaches for automated and semi-automated cyber response techniques using game theory approaches. More specifically, we will describe the Response and Recovery Engine (RRE), which represents adversaries as opponents in a two-player Stackelberg stochastic game. Case studies will also be presented to illustrate the usefulness of these techniques.