Abstract:The power grid is a critical infrastructure essential for public safety and welfare. As its reliance on digital technologies grows, so do its vulnerabilities to sophisticated cyber threats, which could severely disrupt operations. Effective protective measures, such as intrusion detection and decision support systems, are essential to mitigate these risks. Machine learning offers significant potential in this field, yet its effectiveness is constrained by the limited availability of high-quality data due to confidentiality and access restrictions. To address this, we introduce a simulation environment that replicates the power grid's infrastructure and communication dynamics. This environment enables the modeling of complex, multi-stage cyber attacks and defensive responses, using attack trees to outline attacker strategies and game-theoretic approaches to model defender actions. The framework generates diverse, realistic attack data to train machine learning algorithms for detecting and mitigating cyber threats. It also provides a controlled, flexible platform to evaluate emerging security technologies, including advanced decision support systems. The environment is modular and scalable, facilitating the integration of new scenarios without dependence on external components. It supports scenario generation, data modeling, mapping, power flow simulation, and communication traffic analysis in a cohesive chain, capturing all relevant data for cyber security investigations under consistent conditions. Detailed modeling of communication protocols and grid operations offers insights into attack propagation, while datasets undergo validation in laboratory settings to ensure real-world applicability. These datasets are leveraged to train machine learning models for intrusion detection, focusing on their ability to identify complex attack patterns within power grid operations.

AI-based Attacker Models for Enhancing Multi-Stage Cyberattack Simulations in Smart Grids Using Co-Simulation Environments

Simulation of Multi-Stage Attack and Defense Mechanisms in Smart Grids

An Approach of Replicating Multi-Staged Cyber-Attacks and Countermeasures in a Smart Grid Co-Simulation Environment

An Approach to Abstract Multi-stage Cyberattack Data Generation for ML-Based IDS in Smart Grids

Investigation of Multi-stage Attack and Defense Simulation for Data Synthesis

A cyber-physical digital twin approach to replicating realistic multi-stage cyberattacks on smart grids

Graph-based Model of Smart Grid Architectures

A Game-Theoretic Model On Coalitional Attacks In Smart Grid

Modelling Cyber Attacks on Electricity Market Using Mathematical Programming with Equilibrium Constraints.

On Process Awareness in Detecting Multi-stage Cyberattacks in Smart Grids

Towards more realistic co-simulation of cyber-physical energy distribution systems

The Real-Time Co-Simulation Platform with Hardware-in-Loop for Cyber-Attack in Smart Grid

Emerging Simulation Frameworks for Analyzing Smart Grid Cyberattack: A Literature Review

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

Towards Automated Generation of Smart Grid Cyber Range for Cybersecurity Experiments and Training

Co-simulation for cyber security analysis: Data attacks against energy management system

Cyber-Attacks on Smart Meters in Household Nanogrid: Modeling, Simulation and Analysis

Modelling Load-Changing Attacks in Cyber-Physical Systems

CCPA: Coordinated Cyber-Physical Attacks and Countermeasures in Smart Grid.

A Dynamic Cyber-attack Approach for Real-time Hardware-in-the-loop Simulation of Power Grid

On Specification-based Cyber-Attack Detection in Smart Grids