Abstract:The power grid is a critical infrastructure essential for public safety and welfare. As its reliance on digital technologies grows, so do its vulnerabilities to sophisticated cyber threats, which could severely disrupt operations. Effective protective measures, such as intrusion detection and decision support systems, are essential to mitigate these risks. Machine learning offers significant potential in this field, yet its effectiveness is constrained by the limited availability of high-quality data due to confidentiality and access restrictions. To address this, we introduce a simulation environment that replicates the power grid's infrastructure and communication dynamics. This environment enables the modeling of complex, multi-stage cyber attacks and defensive responses, using attack trees to outline attacker strategies and game-theoretic approaches to model defender actions. The framework generates diverse, realistic attack data to train machine learning algorithms for detecting and mitigating cyber threats. It also provides a controlled, flexible platform to evaluate emerging security technologies, including advanced decision support systems. The environment is modular and scalable, facilitating the integration of new scenarios without dependence on external components. It supports scenario generation, data modeling, mapping, power flow simulation, and communication traffic analysis in a cohesive chain, capturing all relevant data for cyber security investigations under consistent conditions. Detailed modeling of communication protocols and grid operations offers insights into attack propagation, while datasets undergo validation in laboratory settings to ensure real-world applicability. These datasets are leveraged to train machine learning models for intrusion detection, focusing on their ability to identify complex attack patterns within power grid operations.

On Graph Theory vs. Time-Domain Discrete Event Simulation for Topology-Informed Assessment of Power Grid Cyber Risk

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

Vulnerability Analysis of Electrical Cyber Physical Systems Using a Simulation Platform.

Cascading Failures of Power System with the Consideration of Cyber Attacks.

Cyber-physical Security Assessment and Simulation Based on Graph Database

Graph Theory and Topological Analysis for Efficient Large-Scale Power Grid Simulation and Vulnerability Assessment

The Structural Vulnerability Analysis of Power Grids Based on Second-Order Centrality.

Cybersecurity Analysis of Data-Driven Power System Stability Assessment

The Structural Vulnerability Analysis of Power Grids Based on Laplacian Centrality.

Power System Cyber-physical Modelling and Security Assessment：Motivation and Ideas

Graph-based Cyber Security Analysis of State Estimation in Smart Power Grid

The Structural Vulnerability Analysis of Power Grids Based on Overall Information Centrality

Structural Vulnerability Assessment of Electric Power Grids

The Impact of the Topology on Cascading Failures in Electric Power Grids

From Delaunay triangulation to topological data analysis: generation of more realistic synthetic power grid networks

Generating Connected, Simple, and Realistic Cyber Graphs for Smart Grids

Modeling and Vulnerability Analysis of Cyber-Physical Power Systems Considering Network Topology and Power Flow Properties

Pattern Analysis of Topological Attacks in Cyber-Physical Power Systems Considering Cascading Outages

Simulation of Multi-Stage Attack and Defense Mechanisms in Smart Grids

Impact Assessment of Hypothesized Cyberattacks on Interconnected Bulk Power Systems

Topological Performance Measures as Surrogates for Physical Flow Models for Risk and Vulnerability Analysis for Electric Power Systems