Comprehensive cybersecurity threat modeling for smart grid infrastructure : a data-flow analysis of low voltage networks

Abstract

Germany’s smart grid transformation introduces unprecedented cybersecurity challenges within low voltage networks. This paper presents a comprehensive threat modeling methodology for German smart grid low voltage networks, integrating BSI IT-Grundschutz, IEC 62351, TR-03109, and IT-SiG 2.0/KRITIS frameworks. Our contribution centers on a transparent threat analysis based on the german regulatory coverage coupled with a comprehensive data flow diagram. Using a STRIDE analysis we identified critical vulnerabilities in cyber-physical componentsandcommunicationinterfaces, including false data injection attacks, credential compromise, and supply chain risks. The research provides systematic threat-tocompliance mapping and actionable insights for securing Germany’s energy infrastructure against evolving threats.