Goaltender: Cloud-Based Defense and Response Tools for the DER Ecosystem

• Main Authors: Choe, Yung Ryn, Brucker-Hahn, Dalton A., Fragkos, George, Sreekumar, Keshav, Nelson, Bailey, Safonov, Alexander, Sullivant, Ryan, Rahman, Aisha B, Tsikteris, Sean, Siraj, Md Sadman, Tsiropoulou, Eirini Eleni, Pineda, Jorge, Johnson, Jay, Tansy, Brian, Lee, Kyu Hyung, Rhee, Junghwan
• Format: Conference Proceeding
• Language: English
• Subjects: and Response Solution; Automation; DER Management System; Distributed Energy Resources (DERs); Distributed power generation; Ecosystems; Electric Vehicle Supply Equipment; Electric vehicles; Firewalls (computing); IEEE 2030.5; Next generation networking; Next-generation Firewalls; OCPP; Protocols; Research and development; Resilience; Security; Security Orchestration
• ISSN: 2766-4481
• DOI: 10.1109/RWS62797.2024.10799447

Many distributed energy resources (DERs), electric vehicle supply equipment (EVSE) manufacturers and third-party vendors utilize persistent cloud connections and Application Programming Interfaces (APIs) through standardized protocols such as IEEE 2030.5 and Open Charge Point Protocol (OCPP). Due to the increasing risk of attacks and malicious data, there is a strong need to safeguard the cloud infrastructure when interconnected with DER and EVSE networks. We propose a defense-in-depth system named Goaltender for distributed energy resource management systems (DERMS) with next-generation firewalls (NGFWs) and security orchestration, automation, and response (SOAR) solutions. We present our design, ongoing research, and development to improve the state-of-the-art of the DER/EVSE ecosystem.