Towards distributed network security monitoring in smart microgrids

The transition of power grids towards open, dynamic, and automated systems requires advanced network security monitoring approaches that comprehensively address emerging threats. These threats can range from targeted attacks on control systems to large-scale disruptions of critical energy infrastructure. The consequences of such attacks can be severe, leading to power outages, compromised energy supply stability, and threats to public safety. This concept paper proposes a decentralized network security monitoring approach designed explicitly for networked microgrids. Our solution monitors microgrids regarding communication networks and power infrastructure, combining information from all microgrid subsystems to detect threats early and automatically initiate countermeasures (e.g., isolating or shutting down the subsystem causing the attack). Furthermore, our approach facilitates the sharing of threat intelligence among microgrids, enhancing the resilience of individual microgrids and the overall power grid.