Distributed Energy Resource Management System (DERMS) Cybersecurity Scenarios, Trends, and Potential Technologies : A Review

Abstract

Critical infrastructures like the power grid face increasing cyber threats due to the widespread integration of interconnected distributed energy resources (DERs). Compromised DER endpoints can trigger cascading outages, intentional device failures, and communication losses. To address these challenges, this paper reviews cybersecurity vulnerabilities in DER management systems (DERMS), including state-of-the-art attacks on data communication protocols, access control mechanisms, and identity management policies. Key threats such as false data injection, malware, denial of service, and network vulnerabilities are discussed. Additionally, realistic threat scenarios are outlined, followed by discussions on advanced security strategies such as the zero trust framework. The paper also introduces new architectural patterns aligned with the IEEE 1547.3 standard, offering a multi-level hierarchical framework for securing DERMS data and assets. Furthermore, it examines cybersecurity threats compromising confidentiality, integrity, availability, and accountability (CIAA) at various levels. This review uniquely consolidates existing research on DER cybersecurity and highlights necessary advancements, particularly intrusion diagnostic units (IDUs), to enhance future DERMS technologies. By ensuring compliance with IEEE 1547.3 standard requirements, this study contributes to improving DER cybersecurity resilience.