Cybersecurity considerations associated with integrating ZigBee wireless mesh technology into emerging U.S. smart grid

The Supervisory Control and Data Acquisition (SCADA) technologies associated with the emerging Smart Grid need to be scalable, inexpensive to implement, and be reliable- this also applies to cybersecurity controls. Traditional SCADA professionals have eschewed employing traditional Information Technology Confidentially-based cybersecurity controls because SCADA systems traditionally focus on employing Availability-based cybersecurity controls. The Department of Energy (DoE) is the agency guiding the legacy electrical power grid upgrade to the Smart Grid via the integration of SCADA-related capabilities in accordance with Title XIII of the Energy Independence and Security Act of 2007. The foundational SCADA-related technology that is essential to Smart Grid operation is an Internet of Things-scalable, field device infrastructure of smart meters or Automated Meter Infrastructure units interconnected via a wireless MESH-based ZigBee protocol suite- similar to the Bluetooth (Institute of Electrical and Electronics Engineers (IEEE) 802.15.1 standard). The ZigBee protocol standard was established by the ZigBee Alliance in 2002 and the Smart Grid-specific ZigBee standard is based upon a consumer-grade ZigBee standard. Federal agencies charged with Smart Grid regulation have not deployed cybersecurity controls associated with wireless network technology to Smart Grid integration. The federal standards and technology organization responsible for SCADA cybersecurity wireless networking standards is focused on SCADA to Wireless-Fidelity (IEEE 802.11) network(s) integration. Cybersecurity researchers have compromised ZigBee encryption and wireless communications. Despite recommended mitigating cybersecurity controls, the aforementioned policy, standards and technology vulnerabilities remain.