Abstract:We propose a game attack–defense graph (GADG) approach that integrates the attack–defense graph and the game theory to model and analyze cyberattacks and defenses in the local metering system (LMS). Different from previous studies concentrating on static analyses of cybervulnerabilities, the GADG method considers correlations among these vulnerabilities. Besides, to avoid the uncertainty brought by unilateral analysis, we introduce the game theory for the interaction analysis between the attacker and the defender. The mixed-strategy Nash equilibrium that they finally reach can serve as the input for the inference of system states. We also propose two eliminating algorithms to reduce the complexity of solving mixed-strategy Nash equilibrium on large-scale LMS. In the case study, our GADG model has been conducted on a real LMS, and the results prove its efficiency. This research aims to assist the power company in optimizing the allocation of limited defensive resources, especially specific in attacking steps. <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Note to Practitioners</i> —This article is motivated by the practical demand of protecting the cybersecurity of the local metering system (LMS), which is a critical subsystem of the smart grid and has been widely deployed to collect and transmit time-stamped information. Different from typical research works on local metering cybersecurity, which focuses on the analysis and identification of cybervulnerabilities, in this study, real experiments considering the interactive scenarios between the attacker and the defender are conducted on the LMS. Based on this, we developed the attack graph to clearly illustrate various cyberattack paths and their corresponding effects. We then applied the game theory model on the attack graph to obtain the optimal attack and defense strategy under each attack scenario. Based on this, the defender, i.e., power company, can optimally allocate limited defense resources among various attacking steps according to our model. The proposed model and method are demonstrated on one exemplar LMS used by our industrial partner China Southern Grid (CSG). Given the generalizability of the proposed model and method, they can be applied to other similar cyber–physical systems.

Terrorist Attack Vulnerability Analysis of a Natural Gas Network Based on the Attacker-Defender Game Model

Defending transportation networks against random and targeted attacks

An Adversarial Model for Attack Vector Vulnerability Analysis on Power and Gas Delivery Operations

Securing transportation of hazardous materials against terrorism: A novel game-based approach

A game-theoretic method to optimize allocation of defensive resource to protect urban water treatment plants against physical attacks

Risk analysis of terrorist attacks on LNG storage tanks at ports

Game Theory for Secure Critical Interdependent Gas-Power-Water Infrastructure

Third-Party Damage Model of a Natural Gas Pipeline Based on a Bayesian Network

Robust Defense Strategy for Gas–Electric Systems Against Malicious Attacks

Attack–Defense Game Model with Multi-Type Attackers Considering Information Dilemma

Vulnerability Assessment of Cyber Physical Power System Based on Dynamic Attack-defense Game Model

An Integrated Quantitative Risk Analysis Method for Natural Gas Pipeline Network

Vulnerability Assessment for Cyber Physical System of Distribution Network in Distributed Cooperative Control Mode

Modeling an Attack-Mitigation Dynamic Game-Theoretic Scheme for Security Vulnerability Analysis in a Cyber-Physical Power System

Game-Theoretic Analysis of Attack and Defense in Cyber-Physical Network Infrastructures

Game Attack–Defense Graph Approach for Modeling and Analysis of Cyberattacks and Defenses in Local Metering System

Dynamic failure probability analysis of urban gas pipeline network

A dynamic defense-attack game scheme with incomplete information for vulnerability analysis in a cyber-physical power infrastructure

A Game-Theoretic Analysis of Cyber Attack-Mitigation in Centralized Feeder Automation System

Risk evolution analysis of gas leakage accidents based on complex network

A Game Theory-Based Approach For Vulnerability Analysis Of A Cyber-Physical Power System