IT in Manufacturing


Cyber security in utility ­communication networks

March 2016 IT in Manufacturing

Security concerns faced in the electrical substations of today stem from a variety of factors. The adoption of new technologies – such as transmission control protocol/Internet protocol (TCP/IP)-based technologies for both substation automation networks and wide area network (WAN) communications between substations – has opened these networks up to more cyber threats. A good cyber security policy, however, is a simple first step to maintaining the reliability and the safety of substation and grid operations.

Cyber security is often used to describe protection against online attacks, but a more holistic view of cyber security involves a collection of measures adopted to prevent unauthorised use, malicious use, denial of use, or modification of information, facts, data or resources. Cyber security not only refers to intentional attacks from outside the network, but also internal issues and unintentional modifications of information.

With both internal and external threat sources in mind, it is important to establish preventative processes for any issue that could lead to network downtime. These measures could include devices, configurations, internal security policies, and employee and contractor training. And since it’s not realistic to assume all threats can be prevented 100% of the time, recovery strategies after issues occur are also critical to protect network uptime.

Cyber security in utility communication networks

Historically, substation control networks were based on local connections and proprietary applications. Systems were designed for safety, reliability and ease of use, and security was not traditionally a concern of network managers or installers. But this approach is no longer valid.

Today’s communications networks are characterised by the use of:

• Commercial off-the-shelf technology.

• Ethernet and TCP/IP-based communications protocols.

• Open standards, IEC60870-5-104 and IEC61850.

• Integration of legacy industrial protocols (DNP3) and Modbus TCP.

• Remote connections (multiple devices and mobility).

• Interconnection with company IT systems.

• Use of public networks.

The complexity of power grids has increased over the years. As they have become interconnected with systems across countries, it has made failures and mistakes more likely – and their potential impact greater in scope and cost.

A thoughtful cyber security policy, combined with a well-designed network infrastructure, can help minimise or contain threats. Cyber security policies strive to meet three main objectives:

1. Confidentiality: preventing unauthorised access to information.

2. Integrity: preventing unauthorised modification or theft of information.

3. Availability: Preventing denial of service (DoS) and ensuring authorised access to information.

In IT networks, confidentiality is the main objective. However, in industrial networks, availability is the critical design parameter.

Analysis of threats

Most network security incidents are accidental instead of intentional. According to the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) vulnerability analysis, authentication flaws were the most abundant vulnerability type identified in 2013. This liability is of particular concern because an attacker with a minimal skill level could potentially gain administrator level access to devices that are accessible over the Internet. Other common vul­nerabilities identified in the analysis include factory hard-coded credentials and weak authentication keys.

Unintentional threats, such as equipment failures and employee carelessness, and deliberate threats, like cyber hackers and viruses, have different types of consequences.

They impact information systems, network infrastructure management and power system assets differently. Due to the critical role the communications network plays in the operation and protection of the high voltage and medium voltage grids, a DoS attack may lead to service disruption and financial losses, as a result of repairs and equipment replacement.

Cyber security is an iterative process – not static. As surrounding conditions or threat sources change, systems and policies may need to be updated to address those changes.

For a better understanding of this process, interested readers can download the full Belden white paper at: http://www.instrumentation.co.za/J667.pdf





Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Sustainable energy management
Siemens South Africa IT in Manufacturing
Utilising its innovative ONE approach technology, Siemens provides complete transparency on resource consumption and offers data-driven optimisation recommendations for sustainable energy management.

Read more...
Paving the way for a carbon-neutral future in South Africa
IT in Manufacturing
At ABB Electrification, we believe the infrastructure of the future must do more than support daily operations, it must anticipate them. We are committed to building intelligent systems that connect and optimise infrastructure across sectors.

Read more...
Africa’s hidden AI advantage
IT in Manufacturing
Through my work implementing AI systems across three continents, I’ve become convinced that Africa’s unique context demands urgent AI adoption. Successful implementation requires local expertise to understand resource constraints as design parameters to create the innovations that make technology truly work under real-world conditions.

Read more...
Siemens Xcelerator empowers space-tech pioneer, Skyroot Aerospace
Siemens South Africa IT in Manufacturing
Siemens Digital Industries Software has announced that Skyroot Aerospace, a leading private space launch service company in India, has adopted Polarion software from the Siemens Xcelerator portfolio to digitally transform its software development processes and enhance efficiency as it aims to accelerate access to space for its customers worldwide.

Read more...
Water is running out, is your ESG strategy ready?
IT in Manufacturing
Water is one of the most critical yet undervalued resources in modern business. Water stewardship asks businesses to understand their water footprint across the entire value chain and to engage with others who share the same water resources.

Read more...
Cybersecurity in 2025: Six trends to watch
IT in Manufacturing
Rockwell Automation’s?10th?State?of?Smart?Manufacturing report finds that cybersecurity risks are a major, ever-present obstacle, and are now the third-largest impediment to growth in the next 12?months.

Read more...
The state of the smart buildings market in 2025
IT in Manufacturing
Smart buildings are entering a transformative phase, driven by sustainability goals, technological innovation and evolving user expectations. According to ABI Research’s latest whitepaper, the sector is undergoing a strategic overhaul across key areas like retrofitting, energy efficiency, data-driven operations and smart campus development.

Read more...
Digital twin for Bavaria’s National Theatre
Siemens South Africa IT in Manufacturing
Siemens and the Bavarian State Opera are digitalising the acoustics in Bavaria’s National Theatre in Munich, Germany. The result is a digital twin that simulates sound effects, orchestral setups and venue configurations in a realistic 3D acoustic model so that musicians, the director and conductors can assess a concert hall’s acoustics even before the first rehearsal.

Read more...
How AI can help solve South Africa’s water crisis
IT in Manufacturing
Climate change, ageing infrastructure, pollution and unequal access are putting intense pressure on the country’s water systems. A powerful question arises: “Can artificial intelligence help us change course?”

Read more...
Backup has evolved, but has your strategy?
IT in Manufacturing
With cyber threats rising and compliance standards tightening, South African organisations are under growing pressure to revisit their data protection strategies. The era of treating backups as a box-ticking exercise is over.

Read more...









While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd | All Rights Reserved