Abstract:Battery systems are crucial components for mission-critical data centers. Without secure energy backup, existing under-provisioned data centers are largely unguarded targets for cyber criminals. Particularly for today's scale-out servers, power oversubscription unavoidably taxes a data center's backup energy resources, leaving very little room for dealing with emergency. Besides, the emerging trend towards deploying distributed energy storage architecture causes the associated energy backup of each rack to shrink, making servers vulnerable to power anomalies. As a result, an attacker can generate power peaks to easily crash or disrupt a power-constrained system. This study aims at securing data centers from malicious loads that seek to drain their precious energy storage and overload server racks without prior detection. We term such load as Power Virus (PV) and demonstrate its basic two-phase attacking model and characterize its behaviors on real systems. The PV can learn the victim rack's battery characteristics by disguising as benign loads. Once gaining enough information, the PV can be mutated to generate hidden power spikes that have a high chance to overload the system. To defend against PV, we propose power attack defense (PAD), a novel energy management patch built on lightweight software and hardware mechanisms. PAD not only increases the attacking cost considerably by hiding vulnerable racks from visible spikes, it also strengthens the last line of defense against hidden spikes. Using Google cluster traces we show that PAD can effectively raise the bar of a successful power attack: compared to prior arts, it increases the data center survival time by 1.6~11X and provides better performance guarantee. It enables modern data centers to safely exploit the benefits that power oversubscription may provide, with the slightest cost overhead.

Vulnerability Analysis of PV Power Terminals and Countermeasures

Attack Detection for Distributed Photovoltaic Generation Systems Leveraging Cyber and Power Side Channel Data

A Novel EMI Attack Exploiting the Control Vulnerability of Photovoltaic Inverters

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

Vulnerability Detection For Smart Grid Devices Via Static Analysis

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

Sensor Attacks on Grid-Tie Photovoltaic Inverters: Synthetic Analysis and Real-Time Robust Detection

Detecting Buffer-Overflow Vulnerabilities in Smart Grid Devices via Automatic Static Analysis

Vulnerability Analysis of Electrical Cyber Physical Systems Using a Simulation Platform.

Power IoT System Security Monitoring Based on Power Consumption Side Channel Information.

A Review of Cyber-Physical Security for Photovoltaic Systems

False Data Injection Attacks in Power Distribution Systems Considering the Characteristics of Distributed Photovoltaic

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Vulnerability Analysis and Critical Areas Identification of the Power Systems under Terrorist Attacks

An integrated approach to improving the ability of power systems to accept distributed PV

Risk Based Vulnerability Assessment for Hvdc Transmission System

On Identifying Vulnerable Nodes for Power Systems in the Presence of Undetectable Cyber-Attacks

Vulnerability of Distributed Inverter VAR Control in PV Distributed Energy System

Voltage security analysis with high PVs penetration considering the interaction of transmission and distribution grids: Case studies

Power Attack Defense

Overcurrent Protection Assessment With High Pv Penetration In A Distribution Network