Fortifying Europe’s Electricity Sector Against Cyber Threats
By Michael Allen
In an era where digital technology permeates every facet of our lives, the vulnerability of critical infrastructure, particularly the electricity sector, has become a pressing concern. Over the past decade, Europe has witnessed a significant uptick in cyber-attacks targeting its power infrastructure, prompting energy companies, experts, and policymakers to seek urgent solutions. In response, a consortium of researchers has come together, backed by EU funding, to enhance the resilience of European energy networks against increasingly sophisticated cyber threats.
The Rising Tide of Cyber Threats
The International Energy Agency (IEA) recently highlighted the alarming trend of cyber-attacks against utilities worldwide, revealing that the average number of such incidents more than doubled between 2020 and 2022. The IEA’s November 2023 report specifically pointed to electricity grids as prime targets, particularly as they transition to more digital technologies. Jesús Torres, an expert in smart grids at the Spanish technology centre CIRCE, emphasized the dual nature of modern grids: “The grid now has a double nature. It’s an electrical system, but it’s also a cyber system. Everything is digitalized, with sensors that can both monitor and control the grid.”
The eFORT Initiative: A Collaborative Approach
To combat these threats, Torres leads a multi-country research initiative known as eFORT, which has received EU funding to address the vulnerabilities of energy networks. This initiative brings together researchers, energy companies, and cybersecurity experts from Belgium, Cyprus, Germany, Greece, Italy, the Netherlands, Spain, Norway, and Ukraine. Their collective goal is to bolster the reliability and resilience of power grids as Europe navigates its digital transformation.
Since its inception in 2022, the eFORT team has been conducting simulations to understand how to protect electric grids from various cyber-attack scenarios. One of the most concerning threats identified is the “manipulation of demand” attack, where internet-connected devices, such as electric vehicle charging points, are misled into sending false information to the grid. This could result in the grid being unprepared for actual electricity demand, potentially leading to widespread outages.
Simulating Cyber Attacks
The researchers’ simulations have revealed that by targeting thousands of interconnected devices, attackers could orchestrate large-scale power cuts. To counteract these threats, the eFORT team is leveraging artificial intelligence (AI) to analyze grid communications and detect anomalies that may indicate an impending attack. Quick identification and response are crucial; once an attack is detected, it may be necessary to isolate affected grid sections to prevent cascading failures.
The eFORT initiative is currently testing various techniques to identify, prevent, and mitigate grid disturbances across several European countries, including Spain, the Netherlands, Italy, and Ukraine. A notable pilot study in the Netherlands features a simulated control room where grid operators are trained to both defend against and emulate attacks, enhancing their ability to manage potential threats effectively.
The ELECTRON Project: Advancing Cybersecurity
In parallel with eFORT, another EU-funded project, ELECTRON, aims to develop next-generation electricity platforms that continuously assess cyber risks, detect anomalies, and prevent failures. Coordinated by Greek cybersecurity expert Andreas Zalonis, the ELECTRON team recognizes that cyber-attacks can stem from various motivations, including financial gain and the desire to destabilize society.
Zalonis pointed out that the financial implications of power outages extend beyond energy providers, affecting local businesses and society at large. The ELECTRON researchers are conducting four pilot studies to address cybersecurity risks, including one inspired by the 2015 hacking of a power distributor in Ukraine that left over 230,000 people without power. Other studies focus on the Romanian power grid and the resilience of renewable energy supplies and electric vehicle charging networks.
Comprehensive Cyber Defense Strategies
The ELECTRON initiative encompasses a holistic approach to cybersecurity, examining everything from identifying vulnerable grid components to detecting and responding to attacks and facilitating recovery afterward. AI plays a pivotal role in monitoring information flows to detect potential threats. Recently, the researchers published guidelines for electricity companies, outlining communication anomalies that may indicate interference with the grid. They are also developing training materials, including attack scenarios, to prepare grid personnel for potential cyber threats.
Moreover, the team is actively pursuing patents for techniques aimed at enhancing the security of electric vehicle charging points, further solidifying their commitment to increasing the resilience of Europe’s energy infrastructure.
Conclusion
As Europe continues its transition to a fully digital energy landscape, the importance of fortifying its electricity sector against cyber threats cannot be overstated. Initiatives like eFORT and ELECTRON represent a proactive approach to safeguarding critical infrastructure, ensuring that energy networks remain robust and reliable in the face of evolving cyber challenges. With collaboration among researchers, energy companies, and cybersecurity experts, Europe is taking significant strides toward a more secure energy future.
Research for this article was funded by the EU’s Horizon Programme. The views expressed by the interviewees do not necessarily reflect those of the European Commission. This article was originally published in Horizon, the EU Research and Innovation Magazine.