IoT and smart grid adoption is increasing grid vulnerabilities

As IoT devices become more integrated into the power grid, the risk of cyberattacks increases. A coordinated attack could manipulate energy flows, cause cascading failures, disrupt power to critical infrastructure, and damage the grid infrastructure. This highlights the need for increased security measures to ensure the safety and stability of the power grid.

One major vulnerability is weak authentication and encryption. Insufficient authentication mechanisms and encryption protocols can leave IoT devices and communication channels vulnerable to unauthorized access. According to an article from CSO online, more than “90 percent of data transactions on IoT devices are unencrypted.”

Let’s look at the lack of security standardization in smart meters as an example. Although the Advanced Metering Infrastructure (AMI) has brought significant benefits, such as energy consumption and billing transparency between utilities and customers, it has also introduced new cybersecurity risks. Security researchers recently discovered a vulnerability in Schneider smart meters that transmits clear text credentials that, if intercepted, could allow an attacker to use the credentials to access smart meters, modify data, or launch a DDOS attack.

IoT devices within a smart grid can also be susceptible to ransomware and malware infections. While there isn’t evidence of smart grid-specific IoT malware yet, threat actors have proven sophisticated enough to develop OT/ICS specific malware like BlackEnergy and Industroyer2, which were responsible for the attack on Ukraine’s power grid in 2015 and 2016. WIRED also reported that in 2019, the hackers behind the 2017 Triton malware probed at least 20 U.S. electric power companies.

As cities continue to take on the “smart grid” concept, threat actors will only continue to find new ways of exploiting vulnerabilities and launching cyberattacks via vulnerable devices used in the power grid.