[secdir] IEC 62351-6 review

["Fred Baker (fred)" <[e-mail]>]

Hello from the SGIP meeting happening this week.

Francis Cleveland, whom some of you no doubt know, is a consultant to NIST and rapporteur-or-something-like-that for IEC 62351-6, which specifies how to secure communication profiles specified within IEC 61850, which in turn specifies the design of electrical substation automation. A large part of that is, surprise, management exchanges, both network and equipment; the remainder is ongoing event communication, maintaining synchronization among equipment. EPRI, which is a company that consults to the power industry, is looking at that with a view to potential updates to make it better and more useful. Francis asked me to work with John Lampe, a consultant to EPRI, on that. Marianne Swanson of NIST tells me that document access can be arranged through the CyberSecurity Working Group of the SGIP, which uses NIST's relationship with ANSI to get access less-onerous access to IEC documents.

To that end, I'd like to get some volunteers to review the document from an "IP Network" perspective. I'm obviously looking for one or two security people to look at the security recommendations, someone from NetConf to look at the network management issues, and someone from opsec to look at the "how does this work in a dual stack network" issues - a total of 3-6 people. I'm happy to have someone that is not a heavily-loaded directorate member; I need your help in identifying whoever that set of people might turn out to be.

BTW, 62351-7 is a bunch of MIBs; they likely need to be updated as well, perhaps with the addition of yang modules for netconf.

Help?