Transcript irriis
“Systematic Experimentation and Demonstration activities” IRRIIS AB Meeting Ottobrunn, 20th May 2008 Sandro Bologna ENEA IRRIIS - FP6-2005–IST-4 EC - LOGO Control Room with MIT WorkStation LCCI 1 Control Room MIT WorkStation MIT WorkStation Control Room LCCI 2 IRRIIS MIT integration with existing SCADA systems IRRIIS IRRIIS Inter-LCCI Communication Highway LCCI 2 LCCI 1 MIT integration with existing SCADA systems IRRIIS Goals of experimentation and demonstration activities 1. Experimentation of SimCIP simulation environment (without MIT) to: o verify the implemented LCCI models and capabilities to implement different scenarios, o identify the set of potential risk situations that could benefit from MIT, to be used for the activities of scenarios set-up 2. Experimentation of MIT system using SimCIP environment with the objectives to verify and evaluate the risk reduction effects 3. Demonstrate the results of points 1) and 2) to the stakeholders in order to have their evaluations and feedbacks IRRIIS Experimentations IRRIIS Experimentation strategy (Step 1) NO ATTACKS/ FAULTS Test-Bed SimCIP Normal behaviours COMPARE BEHAVIOURS WITHOUT MIT Build an experimentation infrastructure Simulation Environment Knowledge elicitation about a set of scenarios ATTACKS/FAULTS EVENTS TREE Test-Bed SimCIP Attack/fault behaviours Attack/faults scenario tables IRRIIS Experimentation strategy (Step 2) MIT Communication Add-on #1 Add-on #2 Add-on #n Test-Bed SimCIP Normal behaviours COMPARE BEHAVIOURS & EFFECTS WITH MIT Build an experimentation infrastructure Simulation Environment Knowledge elicitation about a set of scenarios ATTACKS/FAULTS EVENTS TREE Test-Bed SimCIP Attack/fault behaviours Attack/faults scenario tables IRRIIS Experimentation environment architecture IRRIIS Physical set-up of the experimentation environment Electricity Simulator Electrical SCADA Emulator Telecom SCADA Emulator Telecom Simulator LCCI Telecom Data Base LCCI Electricity Data Base Optional External Components SimCIP Electricity MIT Add-on MITcommunication Electrical Control Room Telecom MIT Add-on IRRIIS Telecom Control Room LCCIs for experimentation P Power (electrical) network PT Power Telecom network (SCADA systems including also telecom network owned by Power Network Operator) T Telecom network (Telecom Infrastructure) TP Telecom Power network (Telecom backup power systems) LCCI Owner Power Telco Carrier Carrier Primary LCCI Supporting CI P T PT TP LCCIs INVOLVED IN THE ROME MINI TELCO BLACK-OUT IRRIIS Simulating different LCCIs components within SimCIP+SinCAL P – Power Network Simulation TP –Telco Power Network Simulation PT – Power Telecom Network Simulation Scenario Table T – Telecom Network Simulation (SCADA) IRRIIS Using scenario tables to define different scenario event sequences P – Power Network Simulation TP –Telco Power Network Simulation PT – Power Telecom Network Simulation Scenario Table T – Telecom Network Simulation (SCADA) IRRIIS Scenarios coverage strategy P PT T TP (primary fault) (primary fault) (primary fault) (primary fault) P+PT P+T P+TP PT+P PT+T (faults) (faults) (faults) (faults) (faults) Scenario Table 1 ……… ……… ……… Scenario Table 2 ……… ……… ……… Scenario Table n ……… ……… ……… ADDITIONAL “ENVIRONMENTAL” CONDITIONS IRRIIS Scenarios execution and evaluation MIT Communication TEFS RE IKA CRIPS Selecting Scenario Tables ……… ……… ……… course of scenario t0 Compiling ti ti ti te t0 = start of scenario te = end of scenario i = 1...n risky situations ti = snapshot of risky situation Logs of the events IRRIIS Evaluating the expected results Verify results Expected results tables Scenario tables Iterative improvements MIT Components TEFS RE IKA Scenario 1 MIT Behavior 1 Detection t1 Local info t2 Remote Info t3 ……… CRIPS Event 1 Event 2 Event 3 ……… T P PT TP Knowledge from analysts/experts IRRIIS Experimentation steps for RE RE Knowledge Base General rules Specific rules Services Updating rules & services/processes relations Knowledge from analysts/experts Scenario 1 Scenario 1 Detection t1 Local info t2 Remote Info t3 ……… MIT Behavior 1 Event 1 Event 2 Event 3 ……… First experimental step Processes System ready for demonstration to stakeholders 1 table fails 2 tables fail MIT Behavior 1 relations Detection t1 Local info t2 Remote Info t3 ……… Event 1 Event 2 Event 3 ……… Second experimental step All tables ok Scenario 1 MIT Behavior 1 Detection t1 Local info t2 Remote Info t3 ……… Event 1 Event 2 Event 3 ……… Final experimental step IRRIIS Status of experiments with SimCIP & SinCAL Networks already modeled: P – Network: The chosen P network is the part of the Rome High Voltage (150 kv) distribution network controlled by the OSTIENSE ACEA control Centre. Three Medium Voltage (20 kv) distribution networks, connected to couples of HV primary substations are also considered. SSinCAL Iinstallation PT – Network: The Power Telco network (with simple/reduced SCADA functionality) associated to the previous P network is implemented. SSimCIP Iinstallation TP - Network: The back-up systems of one backbone (BoB) node, two additional Transit nodes and some local nodes were considered as a part of TP network. As described below at this stage only the backup batteries and not the Diesel generators are considered. T – Network Not yet modelled at this stage IRRIIS SSinCAL load-flow model installation tthree electrical power production points IRRIIS SSinCAL load-flow model installation Tthree electrical services consuming areas Oone serving a “BoB” Telecom node Ttwo serving “Transit” Telecom dodes IRRIIS SSimCIP PT and TP implemented models PT - AGENTS VOLTAGE BUSBAR MONITORS POWER-FLOW LINES MONITORS SWITCHING LINES ACTUATORS LOAD CHARGING ACTUATORS TP - AGENTS BUILDING SERVICES (Batteries, ect.) TELCO DEVICES POWER INTERFACES BoB devices Transit devices Local devices IRRIIS P- Network starting events These events may be classified into more types: FIRST TYPE (proposed by Siemens) Loss of power service supply (caused by line overloading) from one (or more) of the three in-feeder points. Consequences. strong under voltage condition having impact on all the three considered distribution 20 Kv areas with high risk of a generalised black out and loss of the power services to Telecom buildings. Expected mitigation: possibility to negotiate load shedding policies inside areas that are less critical for Telecom LCCI. First implemented scenario table IRRIIS P- Network starting events SECOND TYPE EVENTS Loss of power service supply (caused by a short circuit) form one or more of the primary substations serving one of the three distribution areas, together with a not usual load request from an important consumer in such area. Consequences. Under voltage condition mainly concentrated on the specific affected area. Expected mitigation: Early warning of possible black out involving the specific affected area and negotiation of the restoration time in case of outage. Implemented scenario table Table under development IRRIIS TP- Network starting events TYPE OF EVENT (Events are similar to the real Torpagnotta scenario) Degradation of the BoB or Transit Telco devices functionalities, caused by a flooding inside Telco buildings. Consequently some parts of the PT network become inoperable. Consequences. Additional faults events on the P network (like under voltage or overloading conditions) cannot be monitored/managed by operators (and by MIT components too.) Expected mitigation: Such type of “information system black-outs” risks must be diagnosed early and communicated between LCCIs. In such way on field preventive measures may be undertaken Implemented scenario table Table under development IRRIIS First results from experimentation and demonstration activities 1. Experimentation of SimCIP simulation environment (without MIT) to o verify the implemented LCCI models and capabilities to implement different scenarios, o identify the set of potential risk situations that could benefit from MIT, to be used for the activities of scenario setup 1A. A first version of PT and TP models are correctly implemented, a first scenario table is running, additional scenarios are under development 1B A first set of potential risk situations are identified only for faults arising from the P network. SimCIP T models are under implementation 2. Experimentation of MIT system using SimCIP environment with the objectives to verify and evaluate the risk reduction effects 2. Not started yet 3. Demonstrate the results of points 1) and 2) to the stakeholders in order to have their evaluations and feedbacks 3. Not started yet. Improvements of SimCIP models ad scenarios (1A) are needed, and some experiments with MIT (2) have to be configured and executed. IRRIIS Demonstrations IRRIIS The demostrations Purpose: - demonstrate MIT concepts/components to interested LCCI-stakeholders using the SimCIP environment Objective: - convince LCCI stakeholders that MIT components have a benefit for them (e.g. help to avoid or mitigate cascading effects leading to black-outs) Procedure: - demonstrate the successfully executed IRRIIS experiments Organisation: - scenario-based demo with active LCCI-stakeholder involvement 3 public demonstration events (Germany, Italy, Spain) IRRIIS Schedule for Demonstration Events Month* Host Oct/Nov 2008 1st Demonstration IABG event in Germany Spring 2009 2nd Demonstration ENEA event in Italy Spring 2009 AIA or REE Name 3rd Demonstration event in Spain * preliminary dates depending on project progress IRRIIS Prerequisites and Tasks Prerequisites Tasks Demonstrations (WP4.1) Invitation Setting Materials Feedback PoC Acquisition PoC* Invitation Announcements Rooms Tech Setup Social Event Flyer Handouts Presentations Questionnaire Deliverables Evaluation Selected Experiments Experiments Experimentations (WP3.5) SimCIP MITs SINCAL Integration, test and validation of MIT components (WP3.4) * Point of Contact Framework Whom What How Tec Basis IRRIIS Demonstration Visualisation Example Demonstration Projection Screen CI-Viewer MIT SimCIP Sincal Time Synchronous Presentation of SimCIP and MITs on multiple Screens Audience IRRIIS IRRIIS CI Status Visualisation IRRIIS Comparison & Evaluation of Effects • No. of inhabitants and density of population City Model of Rome • Supply areas of ACEA Viterbo Rieti Roma Number of affected households Amount of lost energy in MWh Frosinone Duration of the outage Latina IRRIIS