DEFGRID - The Utility DSbD Demonstrator (ISCF Digital Security by Design)

The primary aim of the DEFGRID Utility Demonstrator, centered on Digital Security by Design (DSbD), is to demonstrate and showcase the enhanced cybersecurity resilience of critical utility infrastructure, particularly power grids, through the application of DSbD principles. Specifically, UoS/PNDC aims to:
• Demonstrate and evaluate the effectiveness of DSbD hardware within a real-world, utility-scale power grid environment.
• Assess the practical feasibility of integrating DSbD technology into existing operational technology (OT) systems within the power utility sector, focusing on ease of development and operational impact.

DEFGRID project successfully demonstrated the application of Digital Security by Design (DSbD) principles to enhance the security of critical infrastructure, specifically focusing on gas and power utility networks.
The DEFGRID project was successfully delivered through a collaborative effort between Operators of Essential Services (OES) such the distribution networks operators (DNOs), technology partners, and academic institutions, demonstrating the practical application of Digital Security by Design (DSbD) principles in critical national infrastructure (CNI). This partnership enabled a comprehensive approach to integrating Morello technology into real-world operational environments, addressing cybersecurity challenges while maintaining system performance and compliance with industry regulations.

The DEFGRID project successfully demonstrated the benefits of Morello architecture for enhancing cybersecurity in Critical National Infrastructure (CNI) systems. Key achievements include:

• Practical Demonstrations: Morello's integration was proven in real-world CNI scenarios like gas quality systems and industrial automation, showcasing improved security without disrupting existing infrastructure.
• Rigorous Security Testing: The project established a robust cybersecurity validation process, using techniques like static code analysis and attack simulations, confirming Morello's effectiveness against memory vulnerabilities.
• Industry Collaboration: Extensive industry engagement through workshops and knowledge sharing accelerated awareness and potential adoption of Morello and related security technologies.
• Adaptable Approach: Recognizing deployment challenges, the project shifted towards a practical test reference system, enabling near-live site validation and ensuring scalability of security controls, especially meeting Ofgem requirements.