Abstract:While securing wide-area damping controllers (WADCs) against cyber attacks becomes critical, most existing efforts deal with model-based attacks. A smart attacker may not follow the prescribed models and can intelligently change the attack actions. To tackle this challenge, this work proposes a stochastic game theoretic framework that can model the dynamic interaction between the attacker (a jammer) and the defender (intrusion detector in the WADC) with the player’s type uncertainty to optimally manage the vulnerability of the power system. Uniquely, the always opponent assumption of the other player made in most of the existing works is removed as this assumption may lead to serious resource waste due to the high over-defense rate. In this incomplete information stochastic game, the attacker intelligently jams the communication links between phasor measurement units (PMUs) and WADCs, while the intrusion detection of the WADCs is considered as the defense action. The vulnerability level of the power system resulted from the attack and defense actions in the cyber-layer is indexed by the trace of the observability Gramian. Therefore, the proposed stochastic game framework provides a cyber-physical view to make the optimal cyber-layer intrusion detection system (IDS) triggering strategy for the WADC. As the types of the other player are unknown to the defender, a Bayesian based posterior type belief update method is proposed for the defender to update the type belief about the opponent by the boundary probability based on the Bayesian Nash Equilibrium. The proposed cyber-layer IDS triggering strategy is tested and compared with other game approaches on the IEEE 39-bus 10-generator system. Simulation results show that the proposed approach can achieve the same defense performance compared to the complete information stochastic game while reducing the over-defense rate from 40% to 16%.

Bayesian and Stochastic Game Joint Approach for Cross-Layer Optimal Defensive Decision-Making in Industrial Cyber-Physical Systems

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

A Game-Theoretic Method for Resilient Control Design in Industrial Multi-Agent CPSs with Markovian and Coupled Dynamics

A Game-Theoretic Approach to Cross-Layer Security Decision-Making in Industrial Cyber-Physical Systems.

Statistical Knowledge and Game-Theoretic Integrated Model for Cross-Layer Impact Assessment in Industrial Cyber-Physical Systems

Game-Theoretic Model for Optimal Cyber-Attack Defensive Decision-Making in Cyber-Physical Power Systems

Quantitative Cyber-Physical Security Analysis Methodology for Industrial Control Systems Based on Incomplete Information Bayesian Game

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

A Hierarchical Game Approach to the Coupled Resilient Control of CPS against Denial-of-Service Attack

A Dynamic Games Approach to Proactive Defense Strategies against Advanced Persistent Threats in Cyber-Physical Systems

A Hybrid Game Theory and Reinforcement Learning Approach for Cyber-Physical Systems Security

Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networks

Cross-Layer Coordinated Attacks on Cyber-Physical Systems: A LQG Game Framework with Controlled Observations

Incomplete Information Stochastic Game Theoretic Vulnerability Management for Wide-Area Damping Control Against Cyber Attacks

Cyber-Physical System Defense Decision-Making Based on Priori Knowledge of Traffic Anomaly Detection

Optimal Attack Strategy Selection of an Autonomous Cyber-Physical Micro-Grid Based on Attack-Defense Game Model

Optimal Defense Strategy Selection Method for CPS Considering Integrated Cyber–physical Losses

A method of network attack-defense game and collaborative defense decision-making based on hierarchical multi-agent reinforcement learning

A dynamic defense-attack game scheme with incomplete information for vulnerability analysis in a cyber-physical power infrastructure

A Risk-Based Dynamic Decision-Making Approach for Cybersecurity Protection in Industrial Control Systems

A Stochastic Game Theoretic Approach to Attack Prediction and Optimal Active Defense Strategy Decision