Università degli Studi di Napoli Parthenope

Transcription

1 Università degli Studi di Napoli Parthenope Dipartimento per le Tecnologie (DiT) Presentazione dell unità Uniparthenope: Il Gruppo FITNESS (Fault and Intrusion Tolerant NEtworked SystemS) Kick-off meeting PRIN TENACE Rome, Jan, 12-13, 2013

2 Uniparthenope Research Unit: FITNESS group: Luigi Coppolino Assistant Professor Luigi Romano Full Professor PhD students: Ornella Adinolfi - Giuseppe Cicotti - Cesario Di Sarno Salvatore D Antonio Assistant Professor Valerio Formicola - Alessia Garofalo - Giovanna Sannino Carlo Francesco Romano Research Assistants: Luigi Sgaglione

3 Skills WSN Pervasive Healthchare RFID Wearable Computing Remote Patient Monitoring GIS IP Smart Grids Critical Infrastructure Protection Videosurveillance

4 Skills WSN Pervasive Healthchare RFID Wearable Computing Remote Patient Monitoring GIS IP Smart Grids Critical Infrastructure Protection Videosurveillance

5 Activity of Uniparthenope in TENACE Research objectives Two key technologies which enable data collection in power grids, namely synchrophasors devices and Phasor Data Concentrators, might be affected by traditional security weaknesses, such as lack of encryption of the communication channels, lack of input validation and sanitization, weak password policies. In the TENACE project UNIPARTHENOPE will perform a thorough security analysis of these technologies in order to identify vulnerabilities and to design proper strategies and techniques for smart grid protection. Activities Analysis of the security requirements for the data collection infrastructure of a power grid -> used to drive the design and development activities Study of the cyber-attacks that have been performed against power grids Design and development of attack injection techniques for testing the security tools and measures currently adopted to protect power grids Design and development of data collection and parsing tools for collecting, analyzing, and filtering out data from the heterogeneous data sources composing a power grid infrastructure Integration of the data collection and parsing tools with the other components of the TENACE system architecture Involvement in the validation of the TENACE prototype

6 Power Grids Electrical Power System (EPS): all the necessary devices to produce and to transport electric power from production plants to final users. EPS organized in interconnected islands, named Grids or Power Grids. Within an island everything is synchronous (i.e. operates at the same frequency).

7 Smart Grids [ ] an electricity network that can intelligently integrate the actions of all users connected to it - generators, consumers and those that do both - in order to efficiently deliver sustainable, economic and secure electricity supplies. [ ] (EC definition) Close the loop Feedback used to Regulate power distribution and generation; Diagnose problems in the network.

8 Synchrophasors and Power Grids Better diagnosis of the EPS health status Prediction of failures Fault identification

9 Synchrophasors A Phasor Measurement Unit (PMU) is a device that provides as a minimum phase and frequency measurements for one or more three phase AC voltage and/or current waveforms. Synchrophasors are a new technology of PMUs integrating a synchronized time source (e.g. GPS) for time-stamping measurements Provide: GPS Timestamped voltage, phase, and frequency measurements, Measurements are typically sent remotely by using a standard protocol named IEEE C37.118

10 Smart Grid If we set out to design a perfectly bad system of energy delivery, so bad that its failure would have catastrophic consequences, what might it look like? First, it would all be interconnected, so that failure in any one area would affect all others. Second, it would connect real things made of concrete and steel, not just silicon, so that failure would cause real physical damage fires or explosions. And third, we d connect it to the Internet, knowing that intruders could get into it because they ve already tried and succeeded. I m not saying anyone set out to build it that way, but this hypothetical perfectly bad system sounds awfully close to what we re calling the smart grid. Jason Healy, director of the cyberstatecraft initiative at the Washington-based Atlantic Council

11 FITNESS Lab equipment for TENACE Smart Grid Monitoring Testbed, including: - 1 synchrophasor device Schweitzer Engineering Laboratories SEL Protection, Automation and Bay Control System - 1 FNET Frequency Disturbance Recorder FDR-GI-GSY University of Tennessee - Phasor Data Concentrator PDC synchro-phasor data concentrator and protocol conversion gateway - Smart Meter emulators - high-speed network connection with dual-homed firewall SEL FDR-GI-GSY

12 FP7 Research Projects

13 Related projects (EC FP7) SAWSOC (Situation Aware Security Operations Center) MASSIF (MAnagement of Security information and events in Service Infrastructures) INSPIRE (INcreasing Security and Protection through Infrastructure REsilience) INSPIRE INCO (INSPIRE INternational COoperation) INTERSECTION (INfrastructure for heterogeneous, Resilient, SEcure, Complex, Tightly Inter-Operating Networks)

14 Related projects (EC FP7) SAWSOC (Situation Aware Security Operations Center) Situation AWare Security Operations MASSIF (MAnagement of Security information and events in Service Infrastructures) Center (SAWSOC) Start date: January 1st, 2013 (posticipated) Duration: 30 months INSPIRE (INcreasing Security and Protection through Infrastructure REsilience) Funding Scheme: STREP Topic: Convergence of physical and cyber INSPIRE INCO (INSPIRE security INternational COoperation) INTERSECTION (INfrastructure for heterogeneous, Resilient, SEcure, Complex, Tightly Inter-Operating Networks)

15 Related projects (EC FP7) SAWSOC (Situation Aware Security Operations Center) MASSIF (MAnagement of Security information and events in Service Infrastructures) INSPIRE (INcreasing Security and Protection through Infrastructure REsilience) MAnagement of Security information and events in Service InFrastructures (MASSIF) Start date: October 1st, 2010 Duration: 36 months Funding Scheme: IP INSPIRE INCO (INSPIRE INternational COoperation) INTERSECTION (INfrastructure for heterogeneous, Topic: Resilient, Development SEcure, of Complex, an advanced Tightly Inter-Operating Security Networks) Information and Event Management (SIEM) enabling scalable and cross layer correlation

16 Related projects (EC FP7) INSPIRE-INternational COoperation Funding scheme: Small or medium-scale focused research project -STREP - CP- FP-INFSO SAWSOC (Situation Aware Security Operations Center) Consortium: INSPIRE + GRIDSTAT MASSIF (MAnagement of Security information and events in Service Infrastructures) - PNNL - NASPI - University of Tennessee - SEL INSPIRE (INcreasing Security and Protection through Infrastructure REsilience) - Washington University Topic: Smart Grid Protection INSPIRE INCO (INSPIRE INternational COoperation) INTERSECTION (INfrastructure for heterogeneous, Resilient, SEcure, Complex, Tightly Inter-Operating Networks)

17 Standardization Activities

18 Contribution to Standardization Working Groups Participation in ETSI TISPAN Working Group activities in the area of Next Generation Network (NGN) security Contribution to ETSI Speech and Multimedia Transmission Quality (STQ) WG Co-authoring of recommendation on Network Performance Metrics and Measurement Methods in IP Networks Active involvement in the IETF IPFIX Working Group Co-authoring of the IPFIX Internet Draft on flow selection techniques

19 Our premises

20 The Faculty of Engineering Building Centro Direzionale di Napoli Isola C4

21 Contacts

22 Contact Info Luigi Romano Cell: Tel: Luigi Coppolino Cell: Tel: Salvatore D Antonio salvatore.dantonio@uniparthenope.it Cell: Tel: The Fault and Intrusion Tolerant NEtworked SystemS (FITNESS) Research Group

23 Backup Slides

24 SAWSOC Situation AWare Security Operations Center (SAWSOC) FP7 SEC Convergence of physical and cyber security Start date: January 1st, 2013 (posticipated) Duration: 30 months Funding Scheme: STREP

25 SAWSOC SAWSOC aims at bringing a significant advancement in the convergence of physical and logical security meaning: effective cooperation (i.e. a coordinated and results-oriented effort to work together) among previously disjointed functions.

26 SAWSOC case studies

27 MASSIF MAnagement of Security information and events in Service InFrastructures (MASSIF) FP Start date: October 1st, 2010 Duration: 36 months Funding Scheme: IP

28 Motivation and Main objectives The main objective of MASSIF is to achieve a significant advance in the area of Security Information and Event Management (SIEM) by integrating and relating events from different system layers and various domains into one more comprehensive view of security-aware processes and by increasing the scalability of the underlying event processing technology. the objectives of the MASSIF project can be broken up into three categories, namely: Extending SIEM into multiple domains and multiple layers (in particular, services) Extending the evaluation and correlation capabilities of SIEM systems Extending the technical capabilities of SIEM systems

29 INSPIRE INcreasing Security and Protection through Infrastructure Resilience Work programme topic addressed Objective ICT-SEC : Critical Infrastructure Protection Start date: November 1st, 2008 Duration: 24 months

30 Motivation and Main objectives INSPIRE aims at increasing the security and protection of networked systems controlling Critical Infrastructures through the following key actions: analysis and modelling of relationships between critical infrastructures and communication network design and development of innovative mechanisms and architectures capable to differentiate and prioritize Supervisory Control And Data Acquisition (SCADA) traffic flows development of diagnosis and recovery techniques for networked process control systems

31 INSPIRE International Cooperation Link between INSPIRE (EC) and the the GridStat (NSF) project

32 INSPIRE-INCO in a nutshell Proposal: Acronym: INSPIRE-Internationa(l Cooperation) Program: FP7 Call: FP7-ICT Funding scheme: Small or medium-scale focused research project -STREP - CP-FP-INFSO Duration: 12 months (October 1, September 30, 2010) Activity: ICT Supplements to support International Cooperation between ongoing projects

33 The Consortium Europe (INSPIRE): CINI, Consorzio Interuniversitario Nazionale per l Informatica - Coordinator (Italy) TUD, Technical University of Darmstadt (Germany) ITTI, ITTI Sp.zo.o. (Poland) US (GridStat): WSU, Washington State University (USA)

34 PNNL

35 NASPI

36 Cooperation with the Univ. of Tennessee

37 Cooperation with SEL

38 INTERSECTION INfrastructure for heterogeneous, Resilient, SEcure, Complex, Tightly Inter-Operating Networks Work programme topic addressed Challenge 1: Pervasive and Trusted Network and Service Infrastructures Objective ICT : Secure, dependable and trusted infrastructures Start date: January 1st, 2008 Duration: 24 months

39 Motivation and Main objectives Identify and classify the vulnerabilities of heterogeneous and interconnected network infrastructures (wired, wireless, satellite, mobile networks) Design and implement an integrated network security framework including different components and tools: detect anomalous events deploy distributed countermeasures against ongoing attacks provide systems with mechanisms for intrusion tolerance, i.e, preventing intrusions from generating a system failure