English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Electric power delivery relies on a communications backbone that must besecure. SCADA systems are essential to critical grid functions and includeindustrial control systems (ICS) protocols such as the Distributed NetworkProtocol-3 (DNP3). These protocols are vulnerable to cyber threats that powersystems, as cyber-physical critical infrastructure, must be protected against.For this reason, the NERC Critical Infrastructure Protection standard CIP-005-5specifies that an electronic system perimeter is needed, accomplished withfirewalls. This paper presents how these electronic system perimeters can beoptimally found and generated using a proposed meta-heuristic approach foroptimal security zone formation for large-scale power systems. Then, toimplement the optimal firewall rules in a large scale power system model, thiswork presents a prototype software tool that takes the optimization results andauto-configures the firewall nodes for different utilities in a cyber-physicaltestbed. Using this tool, firewall policies are configured for all theutilities and their substations within a synthetic 2000-bus model, assuming twodifferent network topologies. Results generate the optimal electronic securityperimeters to protect a power system's data flows and compare the number offirewalls, monetary cost, and risk alerts from path analysis.

A Firewall Optimization for Threat-Resilient Micro-Segmentation in Power System Networks