Office of Electricity Delivery & Energy ReliabilityU.S. Department of Energy – 1000 Independence Ave., SW Washington, DC 20585

SMART ULSS FORUM“Electricity”

March , 2008

Patricia HoffmanPrincipal Deputy Assistant Secretary

Office of Electricity Delivery and Energy ReliabilityUS Department of Energy

The Electric Grid is a Complex System with Unique Characteristics

Physically § Never holistically designed, grid developed

incrementally in response to local load growth Today, there are:

§ 30,000 Transmission paths; over 180,000 miles of transmission line

§ 14,000 Transmission substations

§ Distribution grid connects these substations with over 100 million loads, i.e. residential, industrial, and commercial customers

§ Diverse industry w/o a common voice

§ 3,170 traditional electric utilities

§ 239 investor-owned, 2,009 publicly owned, 912 consumer-owned rural cooperatives, and 10 Federal electric utilities

Technically§ Electricity flows within three major interconnections

along paths of lowest impedance (at the speed of light); yet the grid is operated in a decentralized manner by over 140 control areas

§ Demand is uncontrolled; electricity is the ultimate “just-in-time” production process

Uniqueness§ Two things make electricity unique:

1. Lack of flow control

2. Lack of large-scale energy storage

§ Change either of these and the grid delivery system will be transformed

Electric Power Infrastructure

− State Sited

Communications Integration

Plug-in Hybrids

Password GuessingSelf-Replicating Code

Password CrackingExploiting Known Vulnerabilities

Disabling Audits

BurglariesHijacking Sessions

Sweepers

Sniffers

DistributedAttack Tools

Denial of Service

GUI

Packet Spoofing

Network Management Diagnostics

Automated Probes/Scans

WWW Attacks

“Stealth”/AdvancedScanning Techniques

1980 1985 1990 1995 2000 2005 2010

Intr

ud

er K

no

wle

dg

e

High

Low

Back Doors

Zombies

BOTS

Morphing

Malicious Code

Attack Sophistication

Current SCADA/PCSZone of Defense

Current cyber security initiatives for SCADA/PCS place industry defenses circa 1994, and thus empowers attackers with high-impact (easy) vectors

Attacker sophistication has decreased due to proliferation of Easy-to-Use (automated) attack tools

War Dialing

Cyber Threat Trends

Courtesy of Idaho National Laboratory

Resiliency/N-X Contingency

Isolation of critical services-MUST RUN

Backup, Diversity and Redundancy

Recovery

Visualization and ControlsTransmission Reliability

Industry Approach to Phasor Technology Research and Applications:

§Visualization

§State Estimation

§Mode Monitoring

§Alarming

§Real Time Controls

GOAL

INFRASTRUCTUREDEVELOPMENT

FORENSIC ANALYSIS/

BASELINING APPLICATIONSINDUSTRYADOPTION

PROBLEM IDENTIFICATION

VISUALIZATIONFOR WIDE-AREA

SITUATIONALAWARENESS

• 1996 Western Interconnection Blackouts

• 2003 Northeast Blackout

§ TVA Super PDC

§ IEEE 37.118

§ NIST SynchroLab

• Real Time Dynamics Monitoring System

• CAISO Operating Engineers Workstation

• BaseliningStatic Angles in East

• Small Signal Stability Monitoring

§ Intelligent Alarming

§ State Estimation

§ Adaptive Islanding

§ EIPP ->NASPI

§ WECC WAMTF

§ Research Roadmap

Cleveland

Phasor Measurements, Real Time Wide-Area Situational Awareness, Visualization, Infrastructure Monitoring, Alarming, and Control

Reliability Metrics and Compliance Monitoring Tools

Common Wide-Area, Real Time Monitoring Platform –Standards Compliance, Key Metrics for Reliability Intelligent Alarms, Reports, and Event Analysis Situation Awareness Visualization Dashboards for NERC, DOE, and FERC

GOAL

INFRASTRUCTUREDESIGN

WIDE-AREAMONITORING

FORENSICANALYSIS

COMPLIANCEMONITORING

PROBLEM IDENTIFICATION

VISUAL-IZATION

• 1999 Low Frequency Events on Eastern Interconnection

• Declining System Performance

• Frequency Excursions

§Wide-areavisualizationinfrastructure

• Relationaltime-seriesdatabase

§ Wide-areareal timeACE-Frequencymonitoring tool

• Suppliersperformance forAGC andfrequencyresponse

§ Interchange Error (AIE) Monitoring

• Wide-area Inadvertent Monitoring

§ Performancestandardsresearch,validation, fieldtrials

• Resourcesadequacy load-generationanalysis andassessment

§ CPS-BAALmonitoring andanalysis

• Research forsituationalawareness forresourceadequacy

Visualization, Compliance, Monitoring, Infrastructure, Real Time Wide-Area Standards Compliance and Situational Awareness

Layer 3 – Wide-Area Real Time Monitoring Applications – Risk, Probabilistic Based

Real-TimeACE-Frequency,CPS-BAAL, AIE

Monitoring

Real-TimeSuppliers

PerformanceFor AGC and FR

Voltage SecurityMonitoring and

Assessment

Real TimeDynamicsMonitoring

System (RTDMS)

RESEARCH FORFUTURE

SITUATIONALAWARENESS

APPLICATIONS

Layer 1 – Relational Memory Based Database with Time Series Capability

Layer 1 - Data Communications .NET, COM+, OPC, Web Based and Data Conversion (API)

Layer 4 – Wide-Area Visualization SolutionsGeo-Graphic Multi-View Multi-Layer RESEARCH FOR HIGH LEVEL VISUAL SOLUTIONSDashboards

Long Term Archiving DatabaseWith PI -Type Tagging

Characteristics for HistoricalData Analysis and Assessment

Layer 2 – Common Archiving, Event, Alarms and Logging Monitoring Services

Real Time Intelligent Alarm,Event and Disturbance Processor

and Services

Real Time Data Quality andPerformance Metrics

Reporting and Notification

Layer 3 – Wide-Area Real Time Monitoring Applications – Risk, Probabilistic Based

Real-TimeACE-Frequency,CPS-BAAL, AIE

Monitoring

Real-TimeSuppliers

PerformanceFor AGC and FR

Voltage SecurityMonitoring and

Assessment

Real TimeDynamicsMonitoring

System (RTDMS)

RESEARCH FORFUTURE

SITUATIONALAWARENESS

APPLICATIONS

Layer 1 – Relational Memory Based Database with Time Series Capability

Layer 1 - Data Communications .NET, COM+, OPC, Web Based and Data Conversion (API)

Layer 4 – Wide-Area Visualization SolutionsGeo-Graphic Multi-View Multi-Layer RESEARCH FOR HIGH LEVEL VISUAL SOLUTIONSDashboards

Layer 4 – Wide-Area Visualization SolutionsGeo-Graphic Multi-View Multi-Layer RESEARCH FOR HIGH LEVEL VISUAL SOLUTIONSDashboards

Long Term Archiving DatabaseWith PI -Type Tagging

Characteristics for HistoricalData Analysis and Assessment

Layer 2 – Common Archiving, Event, Alarms and Logging Monitoring Services

Real Time Intelligent Alarm,Event and Disturbance Processor

and Services

Real Time Data Quality andPerformance Metrics

Reporting and Notification

Jan

2001

Apr

200

1

Jul 2

001

Oct

200

1

Jan

2002

Apr

200

2

Jul 2

002

Oct

200

2

Jan

2003

Apr

200

3

Jul 2

003

Oct

200

3

Jan

2004

Apr

200

4

Jul 2

004

Oct

200

4

Jan

2005

Apr

200

5

Jul 2

005

Oct

200

5

Jan

2006

Apr

200

6

Jul 2

006

Oct

200

6

Jan

2007

0 - 11 - 22 - 33 - 44 - 55 - 66 - 77 - 88 - 99 - 1010 - 1111 - 1212 - 1313 - 1414 - 1515 - 1616 - 1717 - 1818 - 1919 - 2020 - 2121 - 2222 - 2323 - 24

COUNT OF FREQUENCY DISTURBANCES > 28 mHz BY MONTH, BY HOUR OF DAY

0-4 4-8 8-12 12-16 16-20 20-24 24-28 28-32

Count of Events by Month

-400

-200

0

200

400

600

800

1000

1200

Jan-

02F

eb-0

2M

ar-0

2A

pr-0

2M

ay-0

2Ju

n-02

Jul-0

2A

ug-0

2S

ep-0

2O

ct-0

2N

ov-0

2D

ec-0

2Ja

n-03

Feb

-03

Mar

-03

Apr

-03

May

-03

Jun-

03Ju

l-03

Aug

-03

Sep

-03

Oct

-03

Nov

-03

Dec

-03

Jan-

04F

eb-0

4M

ar-0

4A

pr-0

4M

ay-0

4Ju

n-04

Jul-0

4A

ug-0

4S

ep-0

4O

ct-0

4N

ov-0

4D

ec-0

4Ja

n-05

Feb

-05

Mar

-05

Apr

-05

May

-05

Jun-

05Ju

l-05

Aug

-05

Sep

-05

Oct

-05

Nov

-05

Dec

-05

Jan-

06F

eb-0

6M

ar-0

6A

pr-0

6M

ay-0

6Ju

n-06

Jul-0

6A

ug-0

6S

ep-0

6O

ct-0

6N

ov-0

6D

ec-0

6Ja

n-07

Feb

-07

Eve

nt

Cou

nt

(Po

siti

ve >

0.0

50 H

z, N

egat

ive

< -

0.05

0 H

z)

High Low Total

Characteristics (Now and Future)

§ Interoperability§ Flexible (generation diversity,

disruptive technologies)§ Reliable: N-X contingency (X=1, 2,

etc)§ Eco-centric (Impact)§ Provider of Last Resort?§ Human behavior (hybrids, demand

response)