{"id":34298,"date":"2019-07-16T08:00:41","date_gmt":"2019-07-16T07:00:41","guid":{"rendered":"https:\/\/oxforditrc.wpengine.com\/?post_type=casestudies&#038;p=34298"},"modified":"2020-07-18T21:01:49","modified_gmt":"2020-07-18T20:01:49","slug":"cyberattacks-on-londons-electricity-networks-costing-up-to-111m-daily","status":"publish","type":"casestudies","link":"https:\/\/www.itrc.org.uk\/casestudies\/cyberattacks-on-londons-electricity-networks-costing-up-to-111m-daily\/","title":{"rendered":"Cyberattacks on London\u2019s electricity networks costing up to \u00a3111m daily"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; admin_label=&#8221;section&#8221; _builder_version=&#8221;3.22&#8243; custom_padding=&#8221;0px||0px|||&#8221;][et_pb_row column_structure=&#8221;2_3,1_3&#8243; admin_label=&#8221;row&#8221; _builder_version=&#8221;4.2.2&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; width=&#8221;100%&#8221; custom_padding=&#8221;0px||0px|||&#8221;][et_pb_column type=&#8221;2_3&#8243; _builder_version=&#8221;3.25&#8243; custom_padding=&#8221;|||&#8221; custom_padding__hover=&#8221;|||&#8221;][et_pb_image src=&#8221;https:\/\/www.itrc.org.uk\/wp-content\/uploads\/2020\/02\/digital-comms.jpg&#8221; _builder_version=&#8221;4.2.2&#8243;][\/et_pb_image][et_pb_text admin_label=&#8221;Text&#8221; _builder_version=&#8221;3.27.4&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221;]<\/p>\n<p><span style=\"font-size: large;\"><strong>According to new research from infrastructure researcher Dr Edward Oughton, from the UK Infrastructure Transitions Research Consortium (ITRC) at the University of Oxford and the Centre for Risk Studies at the Cambridge Judge Business School, electricity networks are increasingly susceptible to cyberattacks.<\/strong><\/span><\/p>\n<p><span style=\"color: #006f74;\"><strong>Cyberattacks on London electricity networks likely to disrupt 1.5 million people upwards, research warns<\/strong><\/span><\/p>\n<p>\u201cCritical national infrastructure such as smart electricity networks are susceptible to malicious cyberattacks which could cause substantial power outages and cascading failure affecting multiple business, health and education organisations as well domestic supply,\u201d comments Edward Oughton.<\/p>\n<p><span style=\"color: #006f74;\"><strong>Cyberattacks on electricity networks could cost \u00a3111 million daily<\/strong><\/span><\/p>\n<p>Such attacks are likely to become more and more prevalent. In 2015, a cyber-physical attack took place on the Ukrainian electricity distribution network, leading to a loss of power for 225,000 people.\u00a0\u00a0A <a href=\"https:\/\/www.dni.gov\/files\/ODNI\/documents\/2019-ATA-SFR---SSCI.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Worldwide Threat Assessment of the US Intelligence Community report<\/a> published earlier this year also notes that \u201cChina, Russia, Iran, and North Korea increasingly use cyber operations to threaten both minds and machines in an expanding number of ways\u2014to steal information, to influence our citizens, or to disrupt critical infrastructure..<\/p>\n<p>GDP losses from a similar sized attack in London, published in a new paper, \u201c<strong>Cyber-Physical Attacks on Electricity Distribution Infrastructure Networks<\/strong>\u201d, in the <em>Risk Analysis journal<\/em> show conservative scenarios ranging from \u00a320.6 million for a four-substation electricity event to \u00a3111.4 million for a 14-substation electricity event.<\/p>\n<p>Even though the research focused on conservative scenarios similar in size to the Ukrainian attack, the paper demonstrates that 1.5 million people would be affected even by a relatively small attack.<\/p>\n<p>Until Edward and fellow researchers carried out this study, little was known about the effects and costs of cyber-physical attacks on electricity networks. Such networks are proving to be a point of failure which many people previously thought impermeable.<\/p>\n<p>\u201cThe research will be of interest to governments, private infrastructure operators, commercial consumers of infrastructure services and other stakeholders who want to understand systemic risks from cyber-physical attacks on Critical National Infrastructure\u201d, said Professor Daniel Ralph of the Cambridge Centre for Risk Studies.<\/p>\n<p>Edward explains, \u201cCyberattacks are on the increase and gathering data and modelling the effects of such cyber-physical attacks is essential to develop risk analytics for emerging threats on Critical National Infrastructure (CNI).\u201d<\/p>\n<p>The paper uses the United Kingdom as a case study and identifies:<\/p>\n<ul>\n<li>The direct impact on household and business consumers of power<\/li>\n<li>The indirect impact of a cyber-physical attack to infrastructure beyond electricity<\/li>\n<li>A greater understanding of systemic risk arising from cyber and smart energy systems.<\/li>\n<\/ul>\n<p>The research demonstrates that these types of attacks on electricity distribution substations could lead to further indirect infrastructure cascading failure across telecoms, fresh water supply, waste water and even railways.<\/p>\n<p>Economic impacts and disruptive effects to consumption, labour supply and business confidence are also highlighted, identifying impacts on GDP, capital stock, investment, and other indicators.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=&#8221;1_3&#8243; _builder_version=&#8221;3.25&#8243; custom_padding=&#8221;|||&#8221; custom_padding__hover=&#8221;|||&#8221;][et_pb_testimonial author=&#8221;Dr Edward Oughton&#8221; job_title=&#8221;Researcher&#8221; company_name=&#8221;Infrastructure Transitions Research Consortium (ITRC)&#8221; portrait_url=&#8221;https:\/\/www.itrc.org.uk\/wp-content\/uploads\/2020\/07\/itrc-researchers-oughton.png&#8221; quote_icon_color=&#8221;#fe6223&#8243; quote_icon_background_color=&#8221;#ffffff&#8221; portrait_width=&#8221;130px&#8221; portrait_height=&#8221;130px&#8221; _builder_version=&#8221;4.2.2&#8243; background_color=&#8221;rgba(0,0,0,0)&#8221; border_width_all=&#8221;1px&#8221; border_color_all=&#8221;#fe6223&#8243; border_width_bottom=&#8221;5px&#8221;]<\/p>\n<p>Cyberattacks are on the increase and gathering data and modelling the effects of such cyber-physical attacks is essential to develop risk analytics for emerging threats on Critical National Infrastructure (CNI).<\/p>\n<p>[\/et_pb_testimonial][et_pb_blurb use_icon=&#8221;on&#8221; font_icon=&#8221;%%71%%&#8221; icon_color=&#8221;#ffffff&#8221; use_circle=&#8221;on&#8221; icon_placement=&#8221;left&#8221; _builder_version=&#8221;4.2.2&#8243; background_color=&#8221;#3c3c3c&#8221; background_layout=&#8221;dark&#8221; custom_padding=&#8221;30px|30px|30px|30px|true|true&#8221;]<\/p>\n<p><strong>Further reading:<\/strong><\/p>\n<p>Edward J. Oughton, Daniel Ralph, Raghav Pant, Eireann Leverett, Jennifer Copic, Scott Thacker, Rabia Dada, Simon Ruffle, Michelle Tuveson, Jim W Hall.\u00a0 Stochastic Counterfactual Risk Analysis for the Vulnerability Assessment of Cyber-Physical Attacks on Electricity Distribution Infrastructure Networks. <em>Risk Analysis<\/em>. <a href=\"https:\/\/onlinelibrary.wiley.com\/doi\/full\/10.1111\/risa.13291\" target=\"_blank\" rel=\"noopener noreferrer\">doi: 10.1111\/risa.13291<\/a><\/p>\n<p>[\/et_pb_blurb][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>New research shows cyberattacks on London\u2019s electricity networks leads to widespread disruption, costing up to \u00a3111m daily.<\/p>\n","protected":false},"featured_media":34300,"template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"According to new research from infrastructure researcher Dr Edward Oughton, from the UK Infrastructure Transitions Research Consortium (ITRC) at the University of Oxford and the Centre for Risk Studies at the Cambridge Judge Business School, electricity networks are increasingly susceptible to cyberattacks.\r\n\r\n<strong>Cyberattacks on London electricity networks likely to disrupt 1.5 million people upwards, research warns<\/strong>\r\n\r\n\u201cCritical national infrastructure such as smart electricity networks are susceptible to malicious cyberattacks which could cause substantial power outages and cascading failure affecting multiple business, health and education organisations as well domestic supply,\u201d comments Edward Oughton.\r\n\r\n<strong>Cyberattacks on electricity networks could cost \u00a3111 million daily<\/strong>\r\n\r\nSuch attacks are likely to become more and more prevalent. In 2015, a cyber-physical attack took place on the Ukrainian electricity distribution network, leading to a loss of power for 225,000 people.\u00a0\u00a0A <a href=\"https:\/\/www.dni.gov\/files\/ODNI\/documents\/2019-ATA-SFR---SSCI.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Worldwide Threat Assessment of the US Intelligence Community report<\/a> published earlier this year also notes that \u201cChina, Russia, Iran, and North Korea increasingly use cyber operations to threaten both minds and machines in an expanding number of ways\u2014to steal information, to influence our citizens, or to disrupt critical infrastructure..\r\n\r\nGDP losses from a similar sized attack in London, published in a new paper, \u201c<strong>Cyber-Physical Attacks on Electricity Distribution Infrastructure Networks<\/strong>\u201d, in the <em>Risk Analysis journal<\/em> show conservative scenarios ranging from \u00a320.6 million for a four-substation electricity event to \u00a3111.4 million for a 14-substation electricity event.\r\n\r\nEven though the research focused on conservative scenarios similar in size to the Ukrainian attack, the paper demonstrates that 1.5 million people would be affected even by a relatively small attack.\r\n\r\nUntil Edward and fellow researchers carried out this study, little was known about the effects and costs of cyber-physical attacks on electricity networks. Such networks are proving to be a point of failure which many people previously thought impermeable.\r\n\r\n\u201cThe research will be of interest to governments, private infrastructure operators, commercial consumers of infrastructure services and other stakeholders who want to understand systemic risks from cyber-physical attacks on Critical National Infrastructure\u201d, said Professor Daniel Ralph of the Cambridge Centre for Risk Studies.\r\n\r\nEdward explains, \u201cCyberattacks are on the increase and gathering data and modelling the effects of such cyber-physical attacks is essential to develop risk analytics for emerging threats on Critical National Infrastructure (CNI).\u201d\r\n\r\nThe paper uses the United Kingdom as a case study and identifies:\r\n<ul>\r\n \t<li>The direct impact on household and business consumers of power<\/li>\r\n \t<li>The indirect impact of a cyber-physical attack to infrastructure beyond electricity<\/li>\r\n \t<li>A greater understanding of systemic risk arising from cyber and smart energy systems.<\/li>\r\n<\/ul>\r\nThe research demonstrates that these types of attacks on electricity distribution substations could lead to further indirect infrastructure cascading failure across telecoms, fresh water supply, waste water and even railways.\r\n\r\nEconomic impacts and disruptive effects to consumption, labour supply and business confidence are also highlighted, identifying impacts on GDP, capital stock, investment, and other indicators.\r\n\r\n<strong>Further reading:<\/strong> Edward J. Oughton, Daniel Ralph, Raghav Pant, Eireann Leverett, Jennifer Copic, Scott Thacker, Rabia Dada, Simon Ruffle, Michelle Tuveson, Jim W Hall.\u00a0 Stochastic Counterfactual Risk Analysis for the Vulnerability Assessment of Cyber-Physical Attacks on Electricity Distribution Infrastructure Networks. <em>Risk Analysis<\/em>. <a href=\"https:\/\/onlinelibrary.wiley.com\/doi\/full\/10.1111\/risa.13291\" target=\"_blank\" rel=\"noopener noreferrer\">doi: 10.1111\/risa.13291<\/a>","_et_gb_content_width":""},"categories":[89],"areas":[41,50],"class_list":["post-34298","casestudies","type-casestudies","status-publish","has-post-thumbnail","hentry","category-highlights","areas-energy","areas-risk-and-resilience"],"_links":{"self":[{"href":"https:\/\/www.itrc.org.uk\/wp-json\/wp\/v2\/casestudies\/34298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itrc.org.uk\/wp-json\/wp\/v2\/casestudies"}],"about":[{"href":"https:\/\/www.itrc.org.uk\/wp-json\/wp\/v2\/types\/casestudies"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.itrc.org.uk\/wp-json\/wp\/v2\/media\/34300"}],"wp:attachment":[{"href":"https:\/\/www.itrc.org.uk\/wp-json\/wp\/v2\/media?parent=34298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itrc.org.uk\/wp-json\/wp\/v2\/categories?post=34298"},{"taxonomy":"areas","embeddable":true,"href":"https:\/\/www.itrc.org.uk\/wp-json\/wp\/v2\/areas?post=34298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}