Zero Trust User Access and Identity Security in Smart Grid Based SCADA Systems

Abstract

Smart grid based systems are part of modernized critical infrastructures that countries use to operate in various critical sectors ranging from electricity services, nuclear stations, transportation systems, hospital services, waste management, water services, etc. The modern smart grid based systems comprises of operational technology (OT) components and the information technology (IT) components and the convergence of both has introduced new security challenges for the operations of the systems in terms of its safety, reliability, efficiency and stability. The security perimeter is completely redrawn with the OT and IT convergence. The need of the hour is the new approaches towards the security that are innovative and will ensure the security of critical infrastructures. The traditional approach of perimeter-based security defense is obsolete with the convergence of OT and IT. The Zero Trust model for user access and identity is based on concept of “Never Trust but Always Verify” that enable organizations to secure the critical infrastructures by ensuring only trustworthy and validated components are allowed into the network. The perimeter-centric security architecture is replaced by Zero Trust model to ensure and enable security and access decisions for devices, identity and user context to be enforced dynamically. It also ensures that only authorized and authenticated users and devices can have access to the network, systems, applications and data. In this paper we are proposing Zero Trust User Access & Identity Security model that can be implemented in smart grid based SCADA systems.