Visible to the public Moving-Target Defense for Detecting Coordinated Cyber-Physical Attacks in Power Grids

TitleMoving-Target Defense for Detecting Coordinated Cyber-Physical Attacks in Power Grids
Publication TypeConference Paper
Year of Publication2019
AuthorsLakshminarayana, Subhash, Belmega, E. Veronica, Poor, H. Vincent
Conference Name2019 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm)
Date Publishedoct
KeywordsCCPA detection, compositionality, Coordinate measuring machines, coordinated cyber-physical attacks detection, cost reduction, Cyber-physical systems, cyberattack, D-FACTS device deployment, distributed flexible AC transmission system devices, False Data Injection, flexible AC transmission systems, game theory, game-theoretic approach, grids transmission line reactances, human factors, IEEE bus systems, links subset, MATPOWER simulator, Moving Target Defense strategy, MTD design criteria, operators defense cost reduction, power engineering computing, power grids, power system security, power transmission economics, power transmission lines, power transmission reliability, pubcrawl, Resiliency, security of data, sensor measurements, set theory, Smart Grid Sensors, state estimation, systems operational time, telecommunication security, Transmission line matrix methods, Transmission line measurements, undetectable line outages
AbstractThis work proposes a moving target defense (MTD) strategy to detect coordinated cyber-physical attacks (CCPAs) against power grids. A CCPA consists of a physical attack, such as disconnecting a transmission line, followed by a coordinated cyber attack that injects false data into the sensor measurements to mask the effects of the physical attack. Such attacks can lead to undetectable line outages and cause significant damage to the grid. The main idea of the proposed approach is to invalidate the knowledge that the attackers use to mask the effects of the physical attack by actively perturbing the grid's transmission line reactances using distributed flexible AC transmission system (D-FACTS) devices. We identify the MTD design criteria in this context to thwart CCPAs. The proposed MTD design consists of two parts. First, we identify the subset of links for D-FACTS device deployment that enables the defender to detect CCPAs against any link in the system. Then, in order to minimize the defense cost during the system's operational time, we use a game-theoretic approach to identify the best subset of links (within the D-FACTS deployment set) to perturb which will provide adequate protection. Extensive simulations performed using the MATPOWER simulator on IEEE bus systems verify the effectiveness of our approach in detecting CCPAs and reducing the operator's defense cost.
Citation Keylakshminarayana_moving-target_2019