a required security module cannot be activated

Īttention to potential vendors’ security mitigation incompatibilities.

Įmbedding security countermeasures such as security gateways and Hardware Security Modules.

Offering frequent training for staff members.

ĭeploying awareness programs of best practices for users.

įrequently assessing grid systems’ vulnerabilities to ensure closed and secure points of weakness.

IT-based mitigation: some of the recommended IT-based countermeasures as they relate to the threats or Smart Grid are: In closing, we enumerate some of the known threat mitigation solutions.

We can classify possible smart grid threat mitigation solutions as either physical or IT-based fixes.

Thus the best strategy is to have mechanisms in place which will contain the damage from attacks. Due to the size and the complexity of a smart grid, it is usually hard to prevent, deter, or deflect an attack. Mitigation is defense mechanism where the necessary steps are taken to make the impact of an attack less severe. It is important because it is more applicable to systems like the smart grid. Last but not least is the mitigation of attack. Deflection requires a strategy where you provide another target to the attacker which seemed to be more attractive to the attacker but on the other hand less valuable to the system. One other method is to deflect one attack. Deterrence involves different measures to make the offense harder to accomplish. The second method of defense is when you can deter an attack. Thus, by closing the vulnerability, the attacks cannot occur.

The attacks are taking place when there is an intentional exploitation of vulnerability. The first approach is prevention that can be accomplished by blocking an orchestrated attack to our smart grid system or by entirely closing and eliminating a vulnerability. There are different approaches to ICS defending that are similar to the methods of an information and communication system. Mattas, in Handbook of System Safety and Security, 2017 11.3.6 Proposed Solutions

A required security module cannot be activated