Leonardo and A2A to test cyber security solutions for energy distribution infrastructure

Field-testing new prototypes of solutions developed to meet the specific cyber security needs of energy infrastructures: this is the objective of the new collaboration between Leonardo and energy company A2A. The experimentation will focus on the cyber risk analysis of digital assets and services, the virtualisation of application tests and the protection of workstations dedicated to plant control.

These are critical processes for the protection of strategic infrastructures, which are essential to seize the opportunities offered by the evolution of the energy system towards digitisation and decentralisation - consequences of the energy transition and the development of renewable sources - while meeting the security challenges that this transformation entails. The use of digital technology increases the level of interconnection of electricity networks, exposes them to greater cyber risk and requires the deployment of advanced technological solutions to safeguard corporate information assets and ensure continuity of services.

For the analysis of cyber risk, a new generation system will be tested that allows the management of the entire intelligence cycle, from the definition of requirements, the collection of internal and external, structured and unstructured information sources, to the analysis and production of reports and indicators of compromise. This will make it possible to precisely identify threats, the probability of an attack being carried out and then to implement the most appropriate countermeasures.A prototype of a 'multi-sandbox' platform called ARGO will allow simultaneous and orchestrated testing of heterogeneous applications and antivirus software in a virtual operating environment isolated from the network and the company's information system - which will therefore not be exposed to risk - indicating the most effective combinations to fully exploit all available technologies in a secure manner.

Finally, a customised Endpoint Detection and Response (EDR) solution for Industrial Control Systems (ICS) environments will be tested, to monitor control system workstations and respond to security incidents. The system enables active analysis of the behaviour and activities of applications used by users, preventing violations and enabling timely responses.

The new solutions, which are currently being implemented at Leonardo's cyber security research centre, will be tested, on the basis of a specific Memorandum of Understanding (MoU) signed between the two companies, on A2A's plants and networks, with a particular focus on energy generation and distribution processes.