Abstract:Grid-interactive smart buildings integrated with building automation systems (BAS) have gained increasing attention in recent years because of their ability to enable timely data communication that links physical and cyber-based control systems. However, the increasing integration has made both buildings and power grids more vulnerable to cyber-attacks. This study highlights the critical importance of cyber security considering negative energy impacts on grid-interactive buildings, which can severely jeopardize the safety and stability of power grids. This paper first proposes a novel man-in-the-middle (MITM) cyber-attack with specific malicious intent to manipulate the building power demand from the heating, ventilation, and air conditioning (HVAC) systems. The model predictive control (MPC) strategy is implemented to maximize power consumption or load ramp rate while simultaneously ensuring optimal building thermal comfort and evading detection by building occupants. Furthermore, the expert rules, i.e., air handling unit performance assessment rules (APAR), are incorporated as critical constraints in the MPC algorithm to bypass the fault detection alarms. The results demonstrate the capabilities of the proposed MITM cyber-attack scenarios in achieving predetermined objectives without triggering any fault detection alarms. In attack Scenario 1, the total power consumption is increased by up to 55%, and in attack Scenario 2, the load ramp rate is increased by 19 times compared with the fault-free BAS. The comparison between DoS (denial of service), FDI (false data injection), and the proposed cyber-attack, which focuses on their impact on the power grid and concealment analysis, is conducted to raise awareness of the severity and stealthiness of the proposed cyber-attacks. This paper is among the first few developing comprehensive MITM cyber-attacks to intelligently manipulate building power consumption exploiting real-time BAS data. It unveils the important risks associated with BAS and provides valuable insights for further assessment of cyber security of grid-interactive smart buildings.

SPMA: Stealthy Physics-Manipulated Attack and Countermeasures in Cyber-Physical Smart Grid

CCPA: Coordinated Cyber-Physical Attacks and Countermeasures in Smart Grid.

A Double-Benefit Moving Target Defense Against Cyber–Physical Attacks in Smart Grid

Analysis of Malware-Induced Cyber Attacks in Cyber-Physical Power Systems

Cybersecurity Analysis of Data-Driven Power System Stability Assessment

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

Man-in-The-Middle Attacks and Defense in a Power System Cyber-Physical Testbed

Moving-Target Defense for Detecting Coordinated Cyber-Physical Attacks in Power Grids

Unveiling stealthy man-in-the-middle cyber-attacks on energy performance in grid-interactive smart buildings

Moving-Target Defense Against Cyber-Physical Attacks in Power Grids via Game Theory

Coordinated Cyber-Physical Attack on Power Grids Based on Malicious Power Dispatch

Impact Assessment and Defense for Smart Grids With FDIA Against AMI

Load Redistribution Attack in Optimal Power Flow with Phase Shifting Transformers

A Verifiable Framework for Cyber-Physical Attacks and Countermeasures in a Resilient Electric Power Grid

CPMTD: Cyber-physical moving target defense for hardening the security of power system against false data injected attack

A Stealthy Attack Against Electricity Market Using Independent Component Analysis

Sensor Attacks and Resilient Defense on HVAC Systems for Energy Market Signal Tracking

Hybrid Physics-Based and Data-Driven Mitigation Strategy for Automatic Generation Control Under Cyber Attack

Optimal Switching Attacks and Countermeasures in Cyber-Physical Systems.

Multidomain Cyber-Physical Testbed for Power System Vulnerability Assessment