Smart Grid Security: A Verified Deep Reinforcement Learning Framework to Counter Cyber-Physical Attacks

Suman Maiti,Soumyajit Dey
2024-09-24
Abstract:The distributed nature of smart grids, combined with sophisticated sensors, control algorithms, and data collection facilities at Supervisory Control and Data Acquisition (SCADA) centers, makes them vulnerable to strategically crafted cyber-physical attacks. These malicious attacks can manipulate power demands using high-wattage Internet of Things (IoT) botnet devices, such as refrigerators and air conditioners, or introduce false values into transmission line power flow sensor readings. Consequently, grids experience blackouts and high power flow oscillations. Existing grid protection mechanisms, originally designed to tackle natural faults in transmission lines and generator outages, are ineffective against such intelligently crafted attacks. This is because grid operators overlook potential scenarios of cyber-physical attacks during their design phase. In this work, we propose a safe Deep Reinforcement Learning (DRL)-based framework for mitigating attacks on smart grids. The DRL agent effectively neutralizes cyber-physical attacks on grid surfaces by triggering appropriate sequences of existing protection schemes. The safety of the DRL agent is formally verified through a reachability analysis method. Additionally, our framework is designed for deployment on CUDA-enabled GPU systems, which enables faster execution of these protection sequences and their real-time validation. Our framework establishes a new set of protection rules for grid models, successfully thwarting existing cyber-physical attacks.
Cryptography and Security
What problem does this paper attempt to address?
This paper attempts to solve the problem of well - designed cyber - physical attacks faced by the smart grid. Specifically, these problems include: 1. **The impact of malicious attacks on the smart grid**: - The distributed nature of the smart grid and the complex sensors, control algorithms, and data acquisition facilities (such as SCADA centers) make it vulnerable to strategically designed cyber - physical attacks. - These attacks can change the power demand by manipulating high - power IoT devices (such as refrigerators and air conditioners), or introduce false data into the power flow sensor readings of transmission lines, resulting in power outages and high - power oscillations in the grid. 2. **The deficiencies of existing protection mechanisms**: - The existing power grid protection mechanisms are mainly designed for natural failures (such as transmission line failures and generator shutdowns) and cannot effectively deal with these intelligent attacks. - For example, the existing Bad Data Detectors (BDDs) only consider a single state (such as operating frequency) and ignore transient dynamics, so they are ineffective against well - designed False Data Injection Attacks (FDIAs). - The existing protection mechanisms have significant delays, and their action spaces are limited. They can only perform preset load - shedding or tripping operations and are difficult to deal with complex cyber - physical attacks. 3. **Specific threats of attacks**: - The article lists some specific attack models, such as Black IoT attacks (changing the grid frequency by synchronously switching high - power IoT devices), MaD IoT attacks (calculating the voltage stability index and selectively changing the load), False Data Injection Attack (FDIA, introducing false readings into the generator reference power measurements), etc. To solve the above problems, this paper proposes a security framework based on deep reinforcement learning (DRL), aiming to mitigate cyber - physical attacks in the smart grid by triggering an appropriate sequence of protection schemes. The main contributions of this framework include: 1. **Developing new - type anomaly detection units**: - These detection units can monitor all system states and are sensitive to transient dynamics, thus detecting grid attacks more effectively. 2. **Synthesizing DRL defense agents**: - This agent can activate an appropriate sequence of protection schemes at runtime to mitigate any cyber - physical attack. It is trained with a large library of attack scenarios and combines the residual readings of the detection units to enhance performance. 3. **Formally verifying the security of defense agents**: - Ensure the security of DRL agents in the smart grid environment through reachability analysis. 4. **Real - time hardware - in - the - loop (HIL) simulation verification**: - Conduct real - time HIL simulations on the standard IEEE bus model to verify the effectiveness of the method and demonstrate excellent mitigation capabilities in the face of known attacks. In summary, this paper aims to improve the security and stability of the smart grid through an innovative DRL framework to deal with increasingly complex cyber - physical attacks.