Consideration of the Use of Smart Grid Cyberattacks as an Influence Attack and Appropriate Deterrence

Attacks on the ‘smart’ power grid are frequently discussed in the context of grid impairment or disablement being an attacker’s goal. Attacks that occur inadvertently due to power grid equipment becoming infected by general purpose malware or targeted in a broader attack are also described. Attacks have also been discussed where the power grid is seen as a means to an end where the actual target is impacted or made vulnerable through the discontinuation of electrical service. Perhaps a more insidious form of attack is one where the power grid equipment is attacked and compromised, but the compromise is not actually used immediately. Instead, the threat of shutdown or damage is used as leverage to achieve another goal (and to discourage activities to try to remediate the vulnerability). This paper discusses these type of influence attacks. It considers what types of parties would utilize this type of attack and what purposes the attack would be used for. Several scenarios are presented and analyzed. From this analysis, the paper discusses the types of deterrence that would be effective and appropriate. General purpose pre-event deterrence strategies and response/retaliation strategies are both evaluated.