Abstract:While securing wide-area damping controllers (WADCs) against cyber attacks becomes critical, most existing efforts deal with model-based attacks. A smart attacker may not follow the prescribed models and can intelligently change the attack actions. To tackle this challenge, this work proposes a stochastic game theoretic framework that can model the dynamic interaction between the attacker (a jammer) and the defender (intrusion detector in the WADC) with the player’s type uncertainty to optimally manage the vulnerability of the power system. Uniquely, the always opponent assumption of the other player made in most of the existing works is removed as this assumption may lead to serious resource waste due to the high over-defense rate. In this incomplete information stochastic game, the attacker intelligently jams the communication links between phasor measurement units (PMUs) and WADCs, while the intrusion detection of the WADCs is considered as the defense action. The vulnerability level of the power system resulted from the attack and defense actions in the cyber-layer is indexed by the trace of the observability Gramian. Therefore, the proposed stochastic game framework provides a cyber-physical view to make the optimal cyber-layer intrusion detection system (IDS) triggering strategy for the WADC. As the types of the other player are unknown to the defender, a Bayesian based posterior type belief update method is proposed for the defender to update the type belief about the opponent by the boundary probability based on the Bayesian Nash Equilibrium. The proposed cyber-layer IDS triggering strategy is tested and compared with other game approaches on the IEEE 39-bus 10-generator system. Simulation results show that the proposed approach can achieve the same defense performance compared to the complete information stochastic game while reducing the over-defense rate from 40% to 16%.

Estimating the Impact of Cyber-Attack Strategies for Stochastic Control Systems

Stealthy Actuator Signal Attacks in Stochastic Control Systems: Performance and Limitations.

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

Adaptive Event-Driven Control for Continuous Positive Stochastic Jump Models with Cyber Attacks

Towards Quantifying the Impact of Randomly Occurred Attacks on a Class of Networked Control Systems

Stabilization of Networked Control Systems with Hybrid-Driven Mechanism and Probabilistic Cyber Attacks.

Resilient Observer-Based Event-Triggered Control for Cyber-Physical Systems under Asynchronous Denial-of-service Attacks

Optimal Impulse Control for Cyber Risk Management

Security tracking control for discrete-time stochastic systems subject to cyber attacks

Stochastic Control with Distributionally Robust Constraints for Cyber-Physical Systems Vulnerable to Attacks

Cyber-Attacks on Remote State Estimation in Industrial Control System: A Game-Based Framework

Denial-of-service Attacks on Cyber-physical Systems Against Linear Quadratic Control: A Stackelberg-game Analysis

Robust Adaptive Control for Nonlinear Cyber‐physical Systems with FDI Attacks Via Attack Estimation

Risk Assessment Method of Security and Stability Control System Considering the Impact of Cyber Attacks

Exponential Mean-Square Stabilization Control for Cyber-Physical Systems under Random DoS Attacks and Transmission Delay

Sampled-Data Stabilization of Stochastic Interconnected Cyber-Physical Systems Under DoS Attacks

Distributed Secure Coordinated Control for Multiagent Systems under Strategic Attacks.

Risk Assessment for Nonlinear Cyber-Physical Systems under Stealth Attacks

Incomplete Information Stochastic Game Theoretic Vulnerability Management for Wide-Area Damping Control Against Cyber Attacks

A Game-Theoretic Approach of Cyberattack Resilient Constraint-Following Control for Cyber–physical Systems

Assessing the Physical Impact of Cyberattacks on Industrial Cyber-Physical Systems