Abstract:The power grid is a critical infrastructure essential for public safety and welfare. As its reliance on digital technologies grows, so do its vulnerabilities to sophisticated cyber threats, which could severely disrupt operations. Effective protective measures, such as intrusion detection and decision support systems, are essential to mitigate these risks. Machine learning offers significant potential in this field, yet its effectiveness is constrained by the limited availability of high-quality data due to confidentiality and access restrictions. To address this, we introduce a simulation environment that replicates the power grid's infrastructure and communication dynamics. This environment enables the modeling of complex, multi-stage cyber attacks and defensive responses, using attack trees to outline attacker strategies and game-theoretic approaches to model defender actions. The framework generates diverse, realistic attack data to train machine learning algorithms for detecting and mitigating cyber threats. It also provides a controlled, flexible platform to evaluate emerging security technologies, including advanced decision support systems. The environment is modular and scalable, facilitating the integration of new scenarios without dependence on external components. It supports scenario generation, data modeling, mapping, power flow simulation, and communication traffic analysis in a cohesive chain, capturing all relevant data for cyber security investigations under consistent conditions. Detailed modeling of communication protocols and grid operations offers insights into attack propagation, while datasets undergo validation in laboratory settings to ensure real-world applicability. These datasets are leveraged to train machine learning models for intrusion detection, focusing on their ability to identify complex attack patterns within power grid operations.

Towards more realistic co-simulation of cyber-physical energy distribution systems

Vulnerability Analysis of Electrical Cyber Physical Systems Using a Simulation Platform.

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

A cyber-physical digital twin approach to replicating realistic multi-stage cyberattacks on smart grids

An asymmetric interdependent networks model for cyber-physical systems

Co-simulation for cyber security analysis: Data attacks against energy management system

Towards a Framework for Cyber Attack Impact Analysis of Electric Cyber Physical Systems.

AI-based Attacker Models for Enhancing Multi-Stage Cyberattack Simulations in Smart Grids Using Co-Simulation Environments

Cyber physical modeling of distributed resources for distribution system operations

Future Perspectives of Co-Simulation in the Smart Grid Domain

An Approach of Replicating Multi-Staged Cyber-Attacks and Countermeasures in a Smart Grid Co-Simulation Environment

Simulation of Multi-Stage Attack and Defense Mechanisms in Smart Grids

A Verifiable Framework for Cyber-Physical Attacks and Countermeasures in a Resilient Electric Power Grid

Cyber-physical Test Case for Distribution Grid Operation and Control

Assessing Electric Cyber-Physical System Using Integrated Co-Simulation Platform

Demo Abstract: A HIL Emulator-Based Cyber Security Testbed for DC Microgrids

An Integrated Cyber-Physical Simulation Environment for Smart Grid Applications

Using Power-Hardware-in-the-Loop Experiments together with Co-simulation for the Holistic Validation of Cyber-Physical Energy Systems

Graph-based Model of Smart Grid Architectures

Towards an Assisted Simulation Planning for Co-Simulation of Cyber-Physical Energy Systems

An Integrated Research Infrastructure for Validating Cyber-Physical Energy Systems