Information about science based innovations, solid facts to support decision-making, performance and business development for VTT’s partners, customers and anyone interested in high technology and its applications.
A magazine on science, technology and business

​​​​

The energy sector is jointly preparing for cyber threats

Text: Marja Saarikko | Photos: Timo Porthan and the Emergency Supply Agency | 7.6.2018

The National Emergency Supply Agency, Finnish Communications Regulatory Authority (FICORA) and a group of energy companies have jointly launched the KYBER-ENE project, to improve cyber-caution as digitalisation changes the world.

A high level of cyber caution is required in the production and distribution of energy, as these are critical infrastructure. Although Finnish energy companies have traditionally been well prepared, there is still a need for development, particularly now that digitalisation is changing the world.

Fingrid's Security Manager Jyrki Pennanen points out that cyber threats have become increasingly serious in the energy sector. For example, a group of advanced hackers attacked power plants in Ukraine in 2015 and 2016, leaving over 250,000 people without electricity.

– On the other hand, the latest threats include the harnessing of access control systems to extract cyber currencies, which is incredible in itself, he says.

As digitalisation advances, companies are introducing new IoT devices, which is increasing security risks. For example, Pennanen points out that Fingrid has begun piloting IoT-based microphones, which listen to components and detect faults on the basis of their sounds, in a certain substation.

–This is an excellent project in itself, which serves our business, but it creates a new dimension in security, says Pennanen.

As a transmission system operator, Fingrid is well prepared for cyber threats, with five persons working in the area of information security. Many small energy operators, on the other hand, have only one person combatting cyberthreats, as well as performing the company's other IT tasks.

– That is why KYBER-ENE involves seeking good cybersecurity for companies of all levels, in addition to the research, he sums up.

Jyrki Pennanen-5723.jpgJyrki Pennanen.

Taking collaboratio​​n to a new level

For Business Continuity Manager Kalle Luukkainen, the main objective of the project is to raise awareness of and develop expertise on the cyber threats facing the energy sector. The project was begun by organising confidential cyber-security workshops for energy companies.

 – What's new is that energy players have become so actively involved in promoting cyber safety, supported by the National Emergency Supply Agency and the N​ational Cyber Security Centre Finland, Luukkainen says.

He explains that these workshops have focused on the development of competencies, mapping the cybersecurity situation within the production network, and securing remote connections for users and during emergencies.

– Although the project is still at an early stage, it has been progressing well. The right things have been done in the workshops, and those involved have been very active. Cooperation with companies is not new, but it has now risen to a new level of activity.

He points out that, because the project is short, it is only intended to launch cooperation and its continuation is being planned.

– Preparation for cyber threats should be viewed as a kind of continuum, i.e. we need to maintain the good cooperation we have achieved.

Kalle_05.jpgKalle Luukkainen.​

The bar must be kept high

One of KYBER-ENE's sources of background information is a situational snapshot of the Finnish energy sector's readiness to counter cyber threats, which was created in 2015 by the Power Supply Pool of the National Emergency Supply Organisation.

According to Petri Nieminen, Senior Advisor, Power Systems at the National Emergency Supply Agency, the report shows that much remains to be done in both large and small companies.

– All companies should now raise the bar. It was once enough if the firewall was okay, but firewalls don't hold anything back anymore. As part of critical infrastructure, the energy sector is an ideal target for attacks, and we need to prepare for the threats together, he says.

Although two years have elapsed since the report, Nieminen explains that cyber threats have become more serious since then and cyber security has become increasingly important.

– Although no major national security problems have occurred in Finland, we should consider whether an attack like that on Ukraine would be possible here.

He regards mutual peer support among companies as important to combating the cyber threat. 

– Consultants and the authorities can certainly provide companies with support, but the message really gets through if another company is doing the talking.

Petri_012_scarp.jpgPetri Nieminen.

New cyber-threat management model

Pasi Ahonen, Coordinator of the KYBERENE project and a Principal Scientist at VTT, explains that a cyber threat management model was developed in the workshops, which should be duplicated in regional workshops and could be introduced more widely.



– It would be important for the energy sector to create a model for the systematic and rapid development of cybersecurity in the private sector. Good progress was made in developing cyber security at the Kuopio and Mikkeli workshops in particular, because the executives were motivated.

Incidents such as the attack on Ukraine were discussed in the workshops, where we pondered whether the same could happen in Finland. In this way, the participants were given a tangible demonstration of exactly how energy companies can be attacked.

 According to Ahonen, preparedness for cyber attacks is about more than just IT resources.

– A large number of IT staff is not sufficient to improve the level of preparedness; the key issue is integrating preparedness in all activities. The entire organisation must understand cyber-safe practices.​​


KYBER-ENE is part of the National Emergency Supply Agency's KYBER 2020 programme

The KYBER-ENE project involves improving the cybersecurity of critical infrastructure in society. The aim is to improve preparedness among energy companies. VTT is coordinating the project, whose first phase began in November 2017 and ended in April 2018. 

The project steering group include energy companies such as Fingrid, Kuopion Energia, Suur-Savon Sähkö, Helen and Neste. In addition, the National Emergency Supply Agency and National Cyber Security Centre are on the project steering group. 

The KYBER 2020 programme was preceded by the KYBER-TEO project, in which VTT and industry players developed and tested services that ensure industrial cybersecurity.​


 

 

Impulsehttps://www.vttresearch.com/ImpulseImpulse
Cyber security requires more than just technological competenceshttps://www.vttresearch.com/Impulse/Pages/Cyber-security-requires-more-than-just-technological-competences.aspxCyber security requires more than just technological competences
We must maintain Finland as an attractive target for investmenthttps://www.vttresearch.com/Impulse/Pages/We-must-maintain-Finland-as-an-attractive-target-for-investment.aspxWe must maintain Finland as an attractive target for investment
Controlling friction and greenhouse emissions by digitalising materialshttps://www.vttresearch.com/Impulse/Pages/Controlling-friction-and-greenhouse-emissions-by-digitalising-materials.aspxControlling friction and greenhouse emissions by digitalising materials
Maintenance support for astronautshttps://www.vttresearch.com/Impulse/Pages/Maintenance-support-for-astronauts.aspxMaintenance support for astronauts
Finland on its way towards low-carbon year 2050https://www.vttresearch.com/Impulse/Pages/Finland-on-its-way-towards-low-carbon-year-2050.aspxFinland on its way towards low-carbon year 2050
Impulse 1/2018https://www.vttresearch.com/Impulse/Pages/Impulse-1-2018.aspxImpulse 1/2018
Towards bioeconomy with the power of woodhttps://www.vttresearch.com/Impulse/Pages/Towards-bioeconomy-with-the-power-of-wood.aspxTowards bioeconomy with the power of wood
It is the duty of entrepreneurs to seek growthhttps://www.vttresearch.com/Impulse/Pages/It-is-the-duty-of-entrepreneurs-to-seek-growth.aspxIt is the duty of entrepreneurs to seek growth
The rise of robotic carshttps://www.vttresearch.com/Impulse/Pages/The-rise-of-robotic-cars.aspxThe rise of robotic cars
Taking the bioeconomy to a new level through digitalisationhttps://www.vttresearch.com/Impulse/Pages/Taking-the-bioeconomy-to-a-new-level-through-digitalisation.aspxTaking the bioeconomy to a new level through digitalisation
Boost for propeller developmenthttps://www.vttresearch.com/Impulse/Pages/Boost-for-propeller-development.aspxBoost for propeller development
Business for transportationhttps://www.vttresearch.com/Impulse/Pages/Business-for-transportation.aspxBusiness for transportation
Small is big: growth and new opportunities in silicon photonicshttps://www.vttresearch.com/Impulse/Pages/Small-is-big-growth-and-new-opportunities-in-silicon-photonics.aspxSmall is big: growth and new opportunities in silicon photonics
Salofa creates rapid tests for monitoring health and the environmenthttps://www.vttresearch.com/Impulse/Pages/Salofa-creates-rapid-tests-for-monitoring-health-and-the-environment.aspxSalofa creates rapid tests for monitoring health and the environment
Why do so many women feel chilly indoorshttps://www.vttresearch.com/Impulse/Pages/Why-do-so-many-women-feel-chilly-indoors.aspxWhy do so many women feel chilly indoors
Multifunctional polysaccharides open up new opportunities for the food processing industryhttps://www.vttresearch.com/Impulse/Pages/Multifunctional-polysaccharides-open-up-new-opportunities-for-the-food-processing-industry.aspxMultifunctional polysaccharides open up new opportunities for the food processing industry
Matti Apunen: At the core of the solutionhttps://www.vttresearch.com/Impulse/Pages/At-the-core-of-the-solution.aspxMatti Apunen: At the core of the solution
Industrial cyber security improves through cooperationhttps://www.vttresearch.com/Impulse/Pages/Industrial-cyber-security-improves-through-cooperation.aspxIndustrial cyber security improves through cooperation
LED foils can be bent into any shapehttps://www.vttresearch.com/Impulse/Pages/LED-foils-can-be-bent-into-any-shape.aspxLED foils can be bent into any shape
Quantum standards for the new SI systemhttps://www.vttresearch.com/Impulse/Pages/Quantum-standards-for-the-new-SI-system.aspxQuantum standards for the new SI system
Digitalisation in closing the gaphttps://www.vttresearch.com/Impulse/Pages/Digitalisation-in-closing-the-gap.aspxDigitalisation in closing the gap
Transition in the shipping industry: intelligent ship´s bridgeshttps://www.vttresearch.com/Impulse/Pages/Intelligent-ship-bridges.aspxTransition in the shipping industry: intelligent ship´s bridges
Three-dimensional virtual reality and augmented reality – Towards new worldshttps://www.vttresearch.com/Impulse/Pages/Three-dimensional-virtual-reality-and-augmented-reality-Towards-new-worlds.aspxThree-dimensional virtual reality and augmented reality – Towards new worlds
Biobased aromatics essential to the fine chemical industryhttps://www.vttresearch.com/Impulse/Pages/Biobased-aromatics-essential-to-the-fine-chemical-industry.aspxBiobased aromatics essential to the fine chemical industry
Using nuclear power to mitigate climate changehttps://www.vttresearch.com/Impulse/Pages/Using-nuclear-power-to-mitigate-climate-change.aspxUsing nuclear power to mitigate climate change
Using personal know-how to promote the common goodhttps://www.vttresearch.com/Impulse/Pages/Using-personal-know-how-to-promote-the-common-good.aspxUsing personal know-how to promote the common good
New synthetic biology technologies are revolutionising microbial designhttps://www.vttresearch.com/Impulse/Pages/New-synthetic-biology-technologies-are-revolutionising-microbial-design.aspxNew synthetic biology technologies are revolutionising microbial design
Swift and agile in business and in the foresthttps://www.vttresearch.com/Impulse/Pages/Swift-and-agile-in-business-and-in-the-forest.aspxSwift and agile in business and in the forest
Tracking peoplehttps://www.vttresearch.com/Impulse/Pages/Tracking-people.aspxTracking people
Clearing the way for new materials with ChemSheet technologyhttps://www.vttresearch.com/Impulse/Pages/Clearing-the-way-for-new-materials-with-ChemSheet-technology.aspxClearing the way for new materials with ChemSheet technology
Impulse 2/2017https://www.vttresearch.com/Impulse/Pages/Impulse-2-2017.aspxImpulse 2/2017
Impulse 1/2014https://www.vttresearch.com/Impulse/Pages/Impulse-1-2014.aspxImpulse 1/2014
Can a phone help you achieve peace of mind?https://www.vttresearch.com/Impulse/Pages/Can-a-phone-help-you-achieve-peace-of-mind.aspxCan a phone help you achieve peace of mind?
An export product tougher than nailshttps://www.vttresearch.com/Impulse/Pages/An-export-product-tougher-than-nails.aspxAn export product tougher than nails
Digitalisation of the shipping industry requires cutting-edge researchhttps://www.vttresearch.com/Impulse/Pages/Digitalisation-of-the-shipping-industry-requires-cutting-edge-research.aspxDigitalisation of the shipping industry requires cutting-edge research
Energy solutions and the 2050 goalshttps://www.vttresearch.com/Impulse/Pages/Energy-solutions-and-the-2050-goals.aspxEnergy solutions and the 2050 goals
Tua Huomo: Energy production and use – smart choices have an impacthttps://www.vttresearch.com/Impulse/Pages/Energy-production-and-use–smart-choices-an-impact.aspxTua Huomo: Energy production and use – smart choices have an impact
Food in transitionhttps://www.vttresearch.com/Impulse/Pages/Food-in-transition.aspxFood in transition
Minima Processor LTD – World record in energy efficiency accelerates development of IoThttps://www.vttresearch.com/Impulse/Pages/Minima-Processor-LTD-World-record-in-energy-efficiency-accelerates-development-of-IoT.aspxMinima Processor LTD – World record in energy efficiency accelerates development of IoT
Sensor of tomorrowhttps://www.vttresearch.com/Impulse/Pages/Sensor-of-tomorrow.aspxSensor of tomorrow
The perfect pilot environment for Arctic solutionshttps://www.vttresearch.com/Impulse/Pages/The-perfect-pilot-environment-for-Arctic-solutions.aspxThe perfect pilot environment for Arctic solutions
Better beer based on long-term researchhttps://www.vttresearch.com/Impulse/Pages/Better-beer-based-on-long-term-research.aspxBetter beer based on long-term research
Passion spurs researchhttps://www.vttresearch.com/Impulse/Pages/passion-spurs-research.aspxPassion spurs research
Risk management in an increasingly complex worldhttps://www.vttresearch.com/Impulse/Pages/Risk-management-in-an-increasingly-complex-world.aspxRisk management in an increasingly complex world
New breed of business from cellulosehttps://www.vttresearch.com/Impulse/Pages/New-breed-of-business-from-cellulose.aspxNew breed of business from cellulose
Looking through their eyeshttps://www.vttresearch.com/Impulse/Pages/Looking-through-their-eyes.aspxLooking through their eyes
A man driven by optimism and curiosityhttps://www.vttresearch.com/Impulse/Pages/A-man-driven-by-optimism-and-curiosity.aspxA man driven by optimism and curiosity
Jaakko Eskola: ”The ability to reinvent yourself is vital to success.”https://www.vttresearch.com/Impulse/Pages/”The-ability-to-reinvent-yourself-is-vital-to-success”.aspxJaakko Eskola: ”The ability to reinvent yourself is vital to success.”
Converting rags to design clotheshttps://www.vttresearch.com/Impulse/Pages/Converting-rags-to-design-clothes.aspxConverting rags to design clothes