This report describes the scope and results of a project undertaken to help consumer-owned electric utilities improve the cybersecurity of their system interfaces. The team developed a cybersecurity reference architecture for the MultiSpeak interoperability standard, which is used by many of these consumer-owned utilities and their supporting vendors. The analysis and use cases focused on the Remote Connect/Disconnect (RCD) interface, and its vulnerabilities.
An open-source toolkit has also been developed to facilitate customized intrusion detection systems (IDS) for MultiSpeak applications. This report includes a roadmap for others to use and customize this IDS toolkit for additional MultiSpeak versions and interfaces.
Revised: December 1, 2020 |
Published: October 30, 2019