Abstract:Cyber-Physical Systems (CPS) are present in many settings addressing a myriad of purposes. Examples are Internet-of-Things (IoT) or sensing software embedded in appliances or even specialised meters that measure and respond to electricity demands in smart grids. Due to their pervasive nature, they are usually chosen as recipients for larger scope cyber-security attacks. Those promote system-wide disruptions and are directed towards one key aspect such as confidentiality, integrity, availability or a combination of those characteristics. Our paper focuses on a particular and distressing attack where coordinated malware infected IoT units are maliciously employed to synchronously turn on or off high-wattage appliances, affecting the grid's primary control management. Our model could be extended to larger (smart) grids, Active Buildings as well as similar infrastructures. Our approach models Coordinated Load-Changing Attacks (CLCA) also referred as GridLock or BlackIoT, against a theoretical power grid, containing various types of power plants. It employs Continuous-Time Markov Chains where elements such as Power Plants and Botnets are modelled under normal or attack situations to evaluate the effect of CLCA in power reliant infrastructures. We showcase our modelling approach in the scenario of a power supplier (e.g. power plant) being targeted by a botnet. We demonstrate how our modelling approach can quantify the impact of a botnet attack and be abstracted for any CPS system involving power load management in a smart grid. Our results show that by prioritising the type of power-plants, the impact of the attack may change: in particular, we find the most impacting attack times and show how different strategies impact their success. We also find the best power generator to use depending on the current demand and strength of attack.

Attack Reconstruction for a Class of Cyber-physical Systems with Altering Load*

Filter-based Detection and Location of Dynamic Load Altering Attack in Power Cyber-Physical Systems

Towards a Framework for Cyber Attack Impact Analysis of Electric Cyber Physical Systems.

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

Adaptive observer-based attack location and defense strategy in smart grid

Operating State Reconstruction in Cyber Physical Smart Grid for Automatic Attack Filtering

Cyber-attacks against cyber-physical power systems security: State estimation, attacks reconstruction and defense strategy

Real-Time Attack-Recovery for Cyber-Physical Systems Using Linear Approximations

Cyber attack estimation and detection for cyber-physical power systems

An Ensemble Learning-Based Cyber-Attacks Detection Method of Cyber-Physical Power Systems

CCPA: Coordinated Cyber-Physical Attacks and Countermeasures in Smart Grid.

Dynamic load altering attack detection for cyber physical power systems via sliding mode observer

Cyber-Physical Attacks in Power Networks: Models, Fundamental Limitations and Monitor Design

Novel cyber-physical collaborative detection and localization method against dynamic load altering attacks in smart energy grids

Integrity Attacks On Cyber-Physical Systems

Real-Time Data-Predictive Attack-Recovery for Complex Cyber-Physical Systems

Modelling Load-Changing Attacks in Cyber-Physical Systems

Quantitative Analysis of Load Redistribution Attacks in Power Systems

Local Cyber-physical Attack with Leveraging Detection in Smart Grid

Attack Intention Oriented Dynamic Risk Propagation of Cyberattacks on Cyber-Physical Power Systems

Dynamic load altering attack detection based on adaptive fading Kalman filter in smart grid