New threats from digitalised power grids
The ongoing energy transition is making power grids more modern and more digital, opening up new possibilities for intelligent connectivity and more efficient supply. At the same time, however, the attack surface for cybercriminals is growing considerably. In the CyberStress research project, TU Darmstadt and e-netz Südhessen have developed an innovative stress test methodology to make power grids more robust against such cyberattacks.
Particularly critical are scenarios in which networked devices at customer premises are manipulated. One example is the hostile takeover of all charging stations from a single manufacturer, through which hackers could throw the power grid out of balance. Although these charging points are not under the direct control of grid operators, their mass non-compliant behaviour can significantly jeopardise grid stability.
Stress test methodology modelled on the banking sector
The CyberStress project has developed a stress test methodology for power grids based on procedures already established in the banking sector. This systematic approach makes it possible to examine the robustness of power grids against IT attacks and to increase security of supply.
Based on the project results, the consortium has submitted concrete recommendations for anchoring stress tests in law to the Federal Network Agency as the regulatory authority. The aim is to strengthen public protection and to systematically verify how resilient critical infrastructure is against modern cyber threats.
Real-world demonstrator in a transformer substation
A particular milestone of the project is the real-world demonstrator that has been developed and installed in a transformer substation belonging to distribution grid operator e-netz Südhessen. The algorithm developed by TU Darmstadt detects and warns of anomalies in the power grid, for example sudden load changes caused by manipulated charging processes of electric vehicles that cause electrical power to rise sharply within a very short time.
Significance for security of energy supply
Professor Florian Steinke from the Energy Information Networks and Systems group at TU Darmstadt explains the relevance of the real-world demonstrator: "The real-world demonstrator allows us to recreate real attack scenarios and to test detection and defence strategies under realistic conditions. In this way we are creating the foundations for grid operators to identify future risks early and to reliably ensure the energy supply even in an increasingly digital world."
The importance of such protective measures becomes clear against the backdrop of past events. In January 2021 there was a massive disruption in the European electricity supply system that almost led to a blackout, although consumers noticed nothing of it.
Practical relevance for grid operators
Ines Schultze, commercial director of e-netz Südhessen, emphasises the practical benefit: "CyberStress helps us test our grid specifically for cyberattacks and derive measures to make it even more resilient. The close cooperation with TU Darmstadt, the project partners and the Federal Network Agency as our regulatory authority was particularly valuable."
Interdisciplinary cooperation as a success factor
The CyberStress project is distinguished by comprehensive interdisciplinary cooperation. The participants are TU Darmstadt, e-netz Südhessen AG, Q-Group GmbH and the University of Cologne with its chair for the law of digitalisation. The Federal Network Agency and transmission system operator Amprion act as associated partners.
This constellation makes it possible to bring together scientific expertise, practical operating experience and the regulatory perspective. The project is funded by the Federal Ministry of Research, Technology and Space under grant number 13N16628 and is supervised by VDI Technologiezentrum GmbH.
Outlook for the future of network security
The development of CyberStress marks an important step in securing critical infrastructures against modern cyber threats. As the energy transition becomes increasingly digital, preventive security measures of this kind are becoming ever more important.
Transferring proven stress test procedures from the financial sector to energy infrastructure shows how cross-sector learning can help improve cybersecurity. The concrete recommendations to the Federal Network Agency could lead to a regulatory anchoring that makes stress tests mandatory for all grid operators.
For the security technology industry, this development opens up new perspectives: integrating anomaly detection algorithms into existing monitoring systems is becoming increasingly relevant. Companies that operate or monitor critical infrastructures should incorporate the findings from CyberStress into their security strategies and implement corresponding detection systems.
