As I mentioned in a comment earlier today, I have some experience in this field.<p>Yes, the ISOs (Independent System Operators) have Internet presences. Yes, they can send out dispatch signals to the generators over the Internet. Yes, the generators can access an extranet to find out what their current dispatch should be.<p>Security (in the environment I'm most familiar with) is provided using well-known standards (SSL certificates on both the server and the client). I'm sure there are ways to spoof, but I'm not an expert at those things.<p>I have ideas on how to create a bad day for the grid, but I don't think it would be wise for me to share them ;)