September 21, 2022 By Jennifer Gregory 2 min read

In June 2021, CNN asked U.S. Secretary of Energy Jennifer Granholm if U.S. enemies could shut down the power grid. She said they could. Meanwhile, the concern over energy grid attacks has increased with the Russian attack on Ukraine.

Attackers could take down the U.S. power grid by hitting only a few substations, said Jon Wellinghoff, former chairman of the Federal Energy Regulatory Commission. Due to growing concerns, the Department of Energy announced $12 million in funding for research projects. These aim to more securely develop the next generation of energy systems. What does this mean for the industry?

Threats to the energy sector

One problem is the threat of a complete shutdown of the energy grid. Following that, attacks in the energy industry are costly to both utilities and consumers. The 17th annual Cost of a Data Breach Report ranked the energy industry as fifth in costs of a data breach. The majority of cases were external attacks, and only 2% were inside jobs. These breaches cost an average of $4.65 million. In 2021, most attacks in the energy industry were social engineering attacks. Other types of common attacks include system intrusion and web applications.

Grant funding

The $12 million grant funding creates the following six programs:

  • Develop artificial intelligence (AI) -based detection tools and design effective cyber threat mitigation strategies (award of $2 million to Florida International University)
  • Use AI-integrated, resilient and proactive system technologies and solutions to enable defense-in-depth security and resilience for cyber-physical systems (award of $2 million to Iowa State University)
  • Create the Tracking Real-time Anomalies in Power Systems program to detect and localize oddities in power grid cyber-physical systems (award of $1,939,416 to New York University)
  • Use AI and machine learning to develop techniques and scalable prototypes for intrusion response against advanced cyber-physical threats to power systems (award of $1,997,921 to Texas A&M Engineering Experiment Station)
  • Develop a resilient, next-generation solid-state power substation. This will include cybersecurity considerations to improve adoption (award of $2 million to the University of Illinois at Chicago)
  • Create the Cyber REsilience of SubsTations program, which is a two-part system to detect and mitigate cyber incidents while maintaining secure communication and critical functions (award $1,997,864 Virginia Polytechnic Institute and State University).

‘Building a stronger grid’

“Investing in cutting-edge cyber security technology keeps us at the forefront of global innovation and protects America’s power grid in the face of increasing cyber threats from abroad,” said Granholm in a statement. “This funding will bolster our commitment to a secure and resilient clean energy future by fortifying American electricity systems and building a stronger grid.”

The U.S. needs to be looking for ways to secure the next-generation energy grid. That way, the nation can prevent costly shutdowns. Grants such as the recent $12 million can help ensure that. After all, the U.S. needs to remain ahead of attackers as new energy systems are developed.

More from News

FYSA – Adobe Cold Fusion Path Traversal Vulnerability

2 min read - Summary Adobe has released a security bulletin (APSB24-107) addressing an arbitrary file system read vulnerability in ColdFusion, a web application server. The vulnerability, identified as CVE-2024-53961, can be exploited to read arbitrary files on the system, potentially leading to unauthorized access and data exposure. Threat Topography Threat Type: Arbitrary File System Read Industries Impacted: Technology, Software, and Web Development Geolocation: Global Environment Impact: Web servers running ColdFusion 2021 and 2023 are vulnerable Overview X-Force Incident Command is monitoring the disclosure…

Research finds 56% increase in active ransomware groups

4 min read - Any good news is welcomed when evaluating cyber crime trends year-over-year. Over the last two years, IBM’s Threat Index Reports have provided some minor reprieve in this area by showing a gradual decline in the prevalence of ransomware attacks — now accounting for only 17% of all cybersecurity incidents compared to 21% in 2021. Unfortunately, it’s too early to know if this trendline will continue. A recent report released by Searchlight Cyber shows that there has been a 56% increase in…

Cyberattack on American Water: A warning to critical infrastructure

3 min read - American Water, the largest publicly traded United States water and wastewater utility, recently experienced a cybersecurity incident that forced the company to disconnect key systems, including its customer billing platform. As the company’s investigation continues, there are growing concerns about the vulnerabilities that persist in the water sector, which has increasingly become a target for cyberattacks. The breach is a stark reminder of the critical infrastructure risks that have long plagued the industry. While the water utility has confirmed that…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today