Cybersecurity for Distributed Energy Resources: All Hazards Approach for Grid Modernization

Distributed energy resources (DER) sit at the intersection of IoT and critical infrastructure. As we work towards clean energy and decarbonization targets, high rates of growth of DER are expected, making them an important component of generation and grid services. They have been a part of the explosion of internet connected devices developed to solve real-world problems and make life easier by providing clean, local energy and enable the smart management of grid services. However, the quick-to-market, low-cost drivers for DER, combined with a historically relative low-impact has meant that cybersecurity has not been a top priority. So as DER penetration increases, will DER be a part of the growing challenge of securing the grid, or part of the solution for necessary grid modernization? In this talk, we will discuss the factors that have led to our current position and what makes cybersecurity for DER unique. A wide range of research is conducted at national labs, in partnership with industry and academia, to inform everything from standards and regulation, to the development of cyber-physical anomaly detection through use of digital twins, and even advanced threat analytics to SBOM and HBOM tracking. Even with this multi-faceted approach to the challenges, the question remains: is this too little too late or are we doing enough to secure the grid for the next 30 years?