Abstract:Cyber-physical system (CPS) like smart grid deeply integrated with communication networks are often subjected to sophisticated cyber-attacks like false data injection attack (FDIA) with a strong capability of strategic reconnaissance required to learn the environment, where the static characteristics of the system enable easier profiling of the critical infrastructure resources by the adversary. In this paper, we propose a cyber-physical moving target defense (CPMTD) mechanism that focuses on both attack prevention and detection to mitigate such static vulnerabilities and provide combined protections for power system. For attack prevention, we design the Cyber-MTD strategy to disrupt and mislead attack preparation by randomizing data acquisitions with controlled change across multiple system dimensions based on protocol oblivious forwarding (POF) among trusted peer devices in SCADA networks. For attack detection, we design the Physical-MTD strategy to improve the detection probability of FDIAs by periodically changing the measurement matrix of state estimation based on the D-FACTS devices' capability of perturbing the transmission line susceptances in power grids and explore the optimal perturbation in transmission line susceptances based on a cost-benefit analysis. Finally, we discuss two attack cases for network security analysis and evaluate the impact on network performance. Simulations on IEEE 14-bus and 57-bus systems verify the improvement of FDIA detection without significantly increasing operation cost.

Mitigating the impact of false data in wide area control of power systems

Mitigating Propagation of Cyber-Attacks in Wide-Area Measurement Systems

Wide-area measurement system-based supervision of protection schemes with minimum number of phasor measurement units

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

False-Data-Injection-Enabled Network Parameter Modifications in Power Systems: Attack and Detection

On Feasibility and Limitations of Detecting False Data Injection Attacks on Power Grid State Estimation Using D-FACTS Devices

False Data Injection on State Estimation in Power Systems—Attacks, Impacts, and Defense: A Survey

Detection of False Data Injection Attacks on Smart Grids: A Resilience-Enhanced Scheme

Wide-area FACTS Damping Control in Consideration of Feedback Signals' Time Delays

Distributed Attack Detection of Multi-area Power Systems Against False Data Injection Attacks

False Data Injection Attacks With Limited Susceptance Information and New Countermeasures in Smart Grid

False Data Injection Attacks on Hybrid AC/HVDC Interconnected System with Virtual Inertia -- Vulnerability, Impact and Detection

An Improved FDIA Approach for PMU-Assisted Linear Power System State Estimation

Designing False Data Injection attacks penetrating AC-based Bad Data Detection System and FDI Dataset generation

Targeted False Data Injection Attacks Against AC State Estimation Without Network Parameters

CPMTD: Cyber-physical moving target defense for hardening the security of power system against false data injected attack

Distributed host-based collaborative detection for false data injection attacks in smart grid cyber-physical system

Confidence-aware collaborative detection mechanism for false data attacks in smart grids

Detection and Prevention of False Data Injection Attacks in the Measurement Infrastructure of Smart Grids

Event-based model predictive damping control for power systems with cyber-attacks

False Data Detection in a Clustered Smart Grid Using Unscented Kalman Filter