Abstract:While securing wide-area damping controllers (WADCs) against cyber attacks becomes critical, most existing efforts deal with model-based attacks. A smart attacker may not follow the prescribed models and can intelligently change the attack actions. To tackle this challenge, this work proposes a stochastic game theoretic framework that can model the dynamic interaction between the attacker (a jammer) and the defender (intrusion detector in the WADC) with the player’s type uncertainty to optimally manage the vulnerability of the power system. Uniquely, the always opponent assumption of the other player made in most of the existing works is removed as this assumption may lead to serious resource waste due to the high over-defense rate. In this incomplete information stochastic game, the attacker intelligently jams the communication links between phasor measurement units (PMUs) and WADCs, while the intrusion detection of the WADCs is considered as the defense action. The vulnerability level of the power system resulted from the attack and defense actions in the cyber-layer is indexed by the trace of the observability Gramian. Therefore, the proposed stochastic game framework provides a cyber-physical view to make the optimal cyber-layer intrusion detection system (IDS) triggering strategy for the WADC. As the types of the other player are unknown to the defender, a Bayesian based posterior type belief update method is proposed for the defender to update the type belief about the opponent by the boundary probability based on the Bayesian Nash Equilibrium. The proposed cyber-layer IDS triggering strategy is tested and compared with other game approaches on the IEEE 39-bus 10-generator system. Simulation results show that the proposed approach can achieve the same defense performance compared to the complete information stochastic game while reducing the over-defense rate from 40% to 16%.

Balancing the Signals: Bayesian Equilibrium Selection for High-Speed Railway Sensor Defense

Energy-Efficient Intrusion Detection with a Barrier of Probabilistic Sensors: Global and Local

A Bayesian Game-Based Train Protection Method Using Train-to-Train Communication

Research on a Markov Chain Based CSMA/CA Communication Mechanism of Wireless Sensor Network for High-Speed Railway Catenary

Signaling Game Based Strategy of Intrusion Detection in Wireless Sensor Networks.

Resource Allocation in Cooperative Cognitive Radio Networks Towards Secure Communications for Maritime Big Data Systems

Epidemic Analysis of Wireless Rechargeable Sensor Networks Based on an Attack–Defense Game Model

SINR-based power schedule of sensors and DoS attackers in wireless network

Jamming Attack Against Remote State Estimation over Multiple Wireless Channels: A Reinforcement Learning Based Game Theoretical Approach.

Security Investment in Cyber-Physical Systems: Stochastic Games With Asymmetric Information and Resource Constrained Players

A Quantal Response Analysis of Human Decision-Making in Interdependent Security Games Modeled by Attack Graphs

Incomplete Information Stochastic Game Theoretic Vulnerability Management for Wide-Area Damping Control Against Cyber Attacks

Detection and mitigation of attacks on transportation networks as a multi-stage security game

Game Theory-Based Multi-Objective Optimization Interference Alignment Algorithm for HSR 5G Heterogeneous Ultra-Dense Network.

RoF distributed antenna architecture- and reinforcement learning-empowered real-time EMI immunity for highly reliable railway communication

Dynamic Psychological Game Theory for Secure Internet of Battlefield Things (IoBT) Systems

Intrusion Detection for Wireless Sensor Networks: A Multi-Criteria Game Approach.

Strategies of attack–defense game for wireless sensor networks considering the effect of confidence level in fuzzy environment

A Cyber-Security Investment Game for Networked Control Systems

Game Theory Meets Wireless Sensor Networks Security Requirements and Threats Mitigation: A Survey

A game theoretic approach to multi-channel transmission scheduling for multiple linear systems under DoS attacks