Attribute-based Access Control for Secure and Resilient Smart Grids

Recent advancements of Information and Communication Technologies (ICT) have made it a part of almost every domain of everyday life, including the power grid, leading to what is known as the Smart Grid. But the power grid, a critical economic and social infrastructure, is vulnerable to security threats stemming from the use of ICT and to new emerging vulnerabilities and privacy issues. Access control is a fundamental element of the security infrastructure, as, ideally, the principle of less privilege, zero-trust, segregation of duties, and other best practices should be applied without disrupting the functioning of the power grid while also properly maintaining the security of the Smart Grid. The paper presents the work undertaken in the SealedGRID project and the steps taken for implementing Attribute-based Access Control policies specifically tailored to the Smart Grid.