Abstract:The cyber security problem is posing new challenges to the current safety analysis of nuclear power plants. Historically, analogue control systems in the absence of interactive communications are immune to cyber-attacks; however, digital control systems with extensive interconnection of reprogrammable components are intensely vulnerable to cyber-attacks which shed light on the significance and urgency of the cyber security. The current cyber security approaches, which merely focus on information networks, have not given multi-faceted considerations to instrumentation and control (I&C) systems. The cyber-attack on I&C systems may lead to more severe consequences, including the abnormal change of parameters, the malfunction of equipment, and even the accident condition. The existing cyber security approaches for information networks, such as firewalls, encryption, can enhance the cyber security of I&C systems, but are often insufficient in addressing challenges associate with the I&C systems which link cyber space and physical systems. The defense approach based on physical information should be developed to meet the emerging challenges. In this paper, we propose the cyber-physical security (CPS) approach based on the physical process data for the cyber defense. This approach does not intend to replace current cyber defense mechanisms. It could be served as the last barrier for security defense. The goal of the CPS defense approach is to detect attacks at the beginning of the occurrence of physical process anomalies cause by cyber-attacks. A practical implementation of the CPS approach is proposed and its influence on the existing infrastructure is discussed. The statistical analysis techniques are utilized on physical process data for attack detection. The method of dynamic principal component analysis (dynamic PCA) is employed to characterize the correlation of multiple variables in the normal operational condition. In the abnormal operational occurrence, the chi-square detector is able to distinguish adversarial cyber-attacks from ordinary random failures.

IEEE 1815.1-Based Power System Security With Bidirectional RNN-Based Network Anomalous Attack Detection for Cyber-Physical System

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Analysis of Malware-Induced Cyber Attacks in Cyber-Physical Power Systems

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

False-Data-Injection-Enabled Network Parameter Modifications in Power Systems: Attack and Detection

An Ensemble Learning-Based Cyber-Attacks Detection Method of Cyber-Physical Power Systems

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Tracking Real-time Anomalies in Cyber-Physical Systems Through Dynamic Behavioral Analysis

Cybersecurity Analysis of Data-Driven Power System Stability Assessment

NIPAD: a Non-Invasive Power-Based Anomaly Detection Scheme for Programmable Logic Controllers

Attack Detection in Power Distribution Systems Using a Cyber-Physical Real-Time Reference Model

Differential Evolution-Based Three Stage Dynamic Cyber-Attack of Cyber-Physical Power Systems

Detection and mitigation of coordinated cyber-physical attack in CPPS

A packet payload anomaly detection approach for cyber-physical power systems

Cyber Attack Detection of I&C Systems in NPPS Based on Physical Process Data

A Bayesian Attack Tree Based Approach to Assess Cyber-Physical Security of Power System

Cyber-Physical Attacks in Power Networks: Models, Fundamental Limitations and Monitor Design

Multidomain Cyber-Physical Testbed for Power System Vulnerability Assessment

Machine Learning based Post Event Analysis for Cybersecurity of Cyber-Physical System

Security Assessment for Cyber Physical Distribution Power System Under Intrusion Attacks