Cybersecurity Myths on Power Control Systems: 21 Misconceptions and False Beliefs

• Published in: IEEE transactions on power delivery Vol. 26; no. 1; pp. 161 - 172
• Main Authors: Piètre-Cambacédès, L, Tritschler, M, Ericsson, G N
• Format: Journal Article
• Language: English
• Published: New York, NY IEEE 01.01.2011; Institute of Electrical and Electronics Engineers; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Applied sciences; Communication system security; computer network security; Context; Cryptography; cybersecurity; Dispersion; Electrical engineering. Electrical power engineering; Electrical machines; Electrical power engineering; Exact sciences and technology; Grippers; Malware; Miscellaneous; Operation. Load control. Reliability; Posture; Power control; Power electronics, power supplies; Power networks and lines; power system; Protocols; Regulation and control; supervisory control and data-acquisition (SCADA) systems; Utilities; power system; Power system control; Control system; Power electronics; Electric utility; Communication system security; cybersecurity; computer network security; Computer network; Electrical network; Power control; supervisory control and data-acquisition (SCADA) systems; SCADA systems; Telecommunication system; Safety; Energy management
• ISSN: 0885-8977; 1937-4208
• DOI: 10.1109/TPWRD.2010.2061872

This paper presents and analyzes a selection of 21 "myths" identified from the authors' experience as being the most common in power utilities and the most harmful to their cybersecurity posture. For each one, tangible and referenced elements, typically sparse and dispersed, are presented in this single and up-to-date reference to support their rationalization. This paper also provides generic recommendations supporting power utilities on the ongoing and challenging process of dispelling the identified myths.