Abstract:The power grid is a critical infrastructure essential for public safety and welfare. As its reliance on digital technologies grows, so do its vulnerabilities to sophisticated cyber threats, which could severely disrupt operations. Effective protective measures, such as intrusion detection and decision support systems, are essential to mitigate these risks. Machine learning offers significant potential in this field, yet its effectiveness is constrained by the limited availability of high-quality data due to confidentiality and access restrictions. To address this, we introduce a simulation environment that replicates the power grid's infrastructure and communication dynamics. This environment enables the modeling of complex, multi-stage cyber attacks and defensive responses, using attack trees to outline attacker strategies and game-theoretic approaches to model defender actions. The framework generates diverse, realistic attack data to train machine learning algorithms for detecting and mitigating cyber threats. It also provides a controlled, flexible platform to evaluate emerging security technologies, including advanced decision support systems. The environment is modular and scalable, facilitating the integration of new scenarios without dependence on external components. It supports scenario generation, data modeling, mapping, power flow simulation, and communication traffic analysis in a cohesive chain, capturing all relevant data for cyber security investigations under consistent conditions. Detailed modeling of communication protocols and grid operations offers insights into attack propagation, while datasets undergo validation in laboratory settings to ensure real-world applicability. These datasets are leveraged to train machine learning models for intrusion detection, focusing on their ability to identify complex attack patterns within power grid operations.

A model-based approach for self-adaptive security in CPS : Application to smart grids

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

An asymmetric interdependent networks model for cyber-physical systems

Towards a Comprehensive Framework for Cyber-Incident Response Decision Support in Smart Grids

A Hybrid Game Theory and Reinforcement Learning Approach for Cyber-Physical Systems Security

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

A Bayesian Attack Tree Based Approach to Assess Cyber-Physical Security of Power System

Power System Cyber-physical Modelling and Security Assessment：Motivation and Ideas

Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies

Security Analysis of Cyber-Physical Systems Using Reinforcement Learning

Security Risk Modeling in Smart Grid Critical Infrastructures in the Era of Big Data and Artificial Intelligence

AI-based Attacker Models for Enhancing Multi-Stage Cyberattack Simulations in Smart Grids Using Co-Simulation Environments

A System-level Behavioral Detection Framework for Compromised CPS Devices: Smart-Grid Case

Cyber–Physical Security of a Smart Grid Infrastructure

Cyber-Physical Systems Security -- A Survey

Enhancing attack resilience of cyber-physical systems through state dependency graph models

Simulation of Multi-Stage Attack and Defense Mechanisms in Smart Grids

Implementation of a Trust-Based Framework for Substation Defense in the Smart Grid

Designing Secure and Resilient Cyber-Physical Systems: a Model-based Moving Target Defense Approach

Resilience analysis of cyber-physical systems: A review of models and methods

Towards adaptive and proactive security assessment for energy delivery systems