Pilot 2: Thessaloniki, Greece

In Pilot 2 of the COCOON project, led by SELENE-RCC SEE, the primary objective is to elevate the Technology Readiness Level (TRL) of the COCOON solution up to TRL7 by conducting assessments within the Southeast European Regional Security Coordinator (SEL). As depicted in Fig.8 in the Appendix of Part B, SEL plays a critical role in providing coordination services for Transmission System Operators (TSOs) in Southeast Europe and beyond, involving the exchange of grid models and related data for a comprehensive European-wide electrical grid model. The pilot focuses on enhancing security through detailed modeling and examination of potential threats using the COCOON solution. To avoid any impact on SEL’s day-to-day operations, a dedicated environment will be established within SEL’s premises, with a specific emphasis on deploying attack vectors encompassing the full Cyber Kill Chain (CKC) of cyber threats. Threat vectors aligned with the MITRE ATT&CK framework will be deployed in this controlled environment, and the COCOON solution will be evaluated based on its Early Warning System (EWS) and Incident Reporting (IR) capabilities provided through the COCOON Toolset. The pilot involves building a dedicated environment, implementing threat scenario use cases, and evaluating the COCOON solution’s performance in terms of measurement infrastructure, data processing, detection accuracy, and incident response time. Through these efforts, Pilot 2 aims to contribute to securing regional electricity data operations in SEL while ensuring the robustness of coordination processes and protecting against potential cyber threats.

Pilot 2 Demonstrator high-level architecture