Home > Solutions > Security Technology
Securing the Smart Grid
Given the interconnected nature of the smart grid and the significant harm that could arise from malicious attacks on it, strong security measures are required throughout every element of the grid. Silver Spring brings to bear the latest security technologies and practices to ensure end-to-end protection of devices and communications on its smart grid platform.
The Economist, June 6, 2009
Advanced, interconnected meters could introduce a new area of risk. Compromise one and a hacker has full access to every node on the grid, goes the concern. Silver Spring has designed the network interfaces that sit inside each meter, as well as the firmware that runs them, with stringent authentication and authorization measures. Gaining access to a single meter does not open up access across the entire network, because each meter connection operates with separate security credentials. As a result, a hacker would not be able to launch a virus or other attack to issue critical commands such as remote disconnect to a string of meters. Furthermore, Silver Spring incorporates tamper detection and resistance technologies to reduce the risk of unauthorized access even to a single meter.
The firmware, the software that programs the hardware behavior on Silver Spring network devices, requires that its digital signature be verified before initiating an upgrade, which prevents the firmware from being co-opted to serve as a path for relaying a virus.
In addition to ensuring that only authorized personnel can access these devices, Silver Spring protects communications by encrypting the data transmissions between endpoints and the UtilityIQ application suite. Along with the confidentiality that encryption provides, Silver Spring also ensures data integrity by applying hash functions.
The UtilityIQ application suite incorporates additional security measures to protect the operation of the smart grid. It supports role-based access control, for example, reducing the insider threat that personnel could attempt to issue commands across infrastructure outside their jurisdiction.
At Silver Spring, we recognize that our utility customers must fully understand the broad scope of our security measures, and we welcome the opportunity to discuss this topic in more depth.
