INTERNATIONAL ELECTROTECHNICAL COMMISSION IEC TC57 WG15 - Cybersecurity Status & Roadmap June, 2012 Frances Cleveland Convenor WG15 Mission and Scope of WG15 on Cybersecurity . Undertake the development of standards for security of the communication protocols defined by the IEC TC 57 . Specifically the IEC 60870-5 series, the IEC 60870-6 series, the IEC 61850 series, the IEC 61970 series, and the IEC 61968 series. Undertake the development of standards and/or technical reports on end-to-end security issues. WG15 Status June 2012 3 WG15 Members . 71 members . Participants from 20 countries . Argentina . Italy . Canada . Japan . China . Korea . Croatia . Norway . Czechoslovakia . Russia . Denmark . South Africa . Finland . Spain . France . Sweden . Germany . Switzerland . Great Britain . USA . Israel WG15 Status June 2012 4 IEC TC57 Architecture of Information Standards Distributed Energy Resources (DER ) Electric Vehicle Market System Back Office DER Generator IEC 61850-90-7, 8, 9, 10 Control Center A Control Center B DER Storage DMS EMS 61968 62325 Apps. Apps. IEC IEC IEC 61970 IEC 61968 420 - 7 - Communication Bus 61850 IEC IEC 61970 IEC 60870-6 SCADA TASE.2/ICCP IEC 62351 410 - 7 ) Cybersecurity - 3 102 104 - / DNP 61850 ( 5 - 101 CC - - IEC 61850 5 - 1815 SS 60870 Substations / Field Devices IEC 60870 IEEE IEC IEC 61850- Turbine and 90-5 electric systems Substation RTUs PMUs IEC 61850 Automation Systems Hydro systems IEC 60870-5-103 IEC 61850 Hydroelectric/ Gas SS-SS Turbine Power Plants Protection, Control, Metering IEC 61850 GOOSE, SV IEC 61850 Switchgear, Transformers, Instrumental Transformers WG15 Status June 2012 5 Mapping of TC57 Communication Standards to IEC 62351 Security Standards IEC TC57 Communication Standards IEC 62351 Security Standards IEC 62351 Part 1: Introduction IEC 60870-6: TASE.2 (ICCP) IEC 62351 Part 2: Glossary IEC 61850 over MMS IEC 62351 Part 3: Profiles including TCP/IP ) Based - Key : RBAC 9 IEC 61850 GOOSE & SV ( IEC 62351 Part 4: Profiles including MMS Role : Object Models 8 Part 7 Part IEC 60870-5-104 & DNP3 Part IEC 62351 Part 5: IEC 60870-5 & Derivatives Management 62351 62351 IEC 62351 Access Control IEC 60870-5-101 & Serial DNP3 for Network Management IEC 62351 Part 6: IEC 61850 Profiles IEC IEC IEC 62351 Part10: Security Architecture Guidelines for TC57 Systems WG15 Status June 2012 6 Status of IEC 62351 Parts IEC 62351 Part Release Date Activities (June 2012) Planned Release IEC/TS 62351-1: Introduction 2007 IEC/TS 62351-2: Glossary 2008 Review Report Amendment by http://std.iec.ch/terms/terms.nsf/ByPub?OpenView&Co pending mid 2013 unt=-1&RestrictToCategory=IEC%2062351-2 IEC/TS 62351-3: Security for profiles 2007 Updated document CDV by June 2012 including TCP/IP being finalized June IS Ed. 2 by June 2012 2013 IEC/TS 62351-4: Security for profiles 2007 including MMS IEC/TS 62351-5: Security for IEC 60870-5 and 2009 DTS as Ed. 2 TS Ed. 2 by Q3 derivatives 2012 IEC/TS 62351-6: Security for IEC 61850 2007 Updates planned but profiles not started IEC/TS 62351-7: Objects for Network 2010 Management IEC/TS 62351-8: Role-Based Access Control 2011 IEC/TS 62351-9: Key Management CD to be submitted June 2012 IEC/TS 62351-10: Security Architecture DTS sent to IEC – TS by Q3 2012 voting date 6-22-12 IEC/TS 62351-11: Security for XML Files NWIP – closing date 7-27-12 WG15 Status June 2012 7 Coordination with Other Security Activities . IEC TC57 WG15 has a Liaison A with IEC TC65C which will review and standardize the work of the ISA SP99 Security Standards . IEC TC57 WG15 has a Liaison D with the IEEE PES PSCC Security Subcommittee . Pending: . Liaison D with M/490 SGIS . Liaison D with UCAIug . Liaison ?? With ISO JTC 1 / SC 27 “IT Security” . Coordination: . NIST Cyber Security Working Group (CSWG) under NIST’s Smart Grid Interoperability Panel . NERC CIP 002-009 – WG15 has members who are very active with NERC security activities . Cigré D2.22 WG15 Status June 2012 8 TC57 Security (IEC 62351) Roadmap As of June 2012 Completed and Current Updates & New Work On-Going Work Coordination • Parts 1, 2, 3, 4, 5, 6, 7, & 8 • Part 9 Key Management, • IEC TC65C WG10 – finalized as TS Standards CD due June 2012 • ISA SP99 (Ed 1) • Part 10 Security • CIGRE D2.22 • Parts 9, 10, & 11 – in Architecture, TS expected process shortly • NIST CSWG • Parts 3 & 5 being updated • Part 11 Security for XML • M/490 SGIS to Ed 2 Files, just starting • IEC TC13 • ISO/IEC JTC 1 / SC 27 for ISO 27000 series 9 WG15 Status June 2012 Issues . Intellectual Property issues with certain cryptographic suites . Although we have cybersecurity experts, they are very busy . Cybersecurity is a very dynamic, rapidly changing field which is quite new for the power industry . Need rapid development of new standards and updates to existing standards . Need guidelines for end-to-security . Need both standards and technical reports . Need input from power system domain experts on security requirements WG15 Status June 2012 10 INTERNATIONAL ELECTROTECHNICAL COMMISSION Questions? Comments? .