Intelligent Energy Networks and Smart Grids recommend the use of new communication systems, sensing and control and require the use of Information and Communication Technologies (ICTs). This new infrastructure enhances the efficiency and reliability of the power distribution network. However, it can present some vulnerabilities and so increases the cyber attacks possibility on the power networks.
The increasing use of automation elements in the substation environment allows remote access to these elements, allowing changes in their parameters (IEDs, SCADA and PLCs). Consequently, the security of these environments requires much more complex actions than simple physical protection of their limits. It is vital for power utilities identify and assess cyber security risks in a substation environment.
This Research and Development work developed by FITec, Concert and Cemig, presents: 1) a methodology for analysis of cyber security compliance, and 2) a laboratory design for pentesting in a power distribution substation. That substation has a typical design used by Cemig, one of the largest Brazilian power distributors.