首页> 外文期刊>Computers & Security >Security design against stealthy attacks on power system state estimation: A formal approach
【24h】

Security design against stealthy attacks on power system state estimation: A formal approach

机译:防止对电力系统状态估计进行隐式攻击的安全性设计:一种正式方法

获取原文
获取原文并翻译 | 示例
           

摘要

State estimation is very important for securely, reliably, and efficiently maintaining a power grid. If state estimation is not protected, an attacker can compromise meters or communication systems and introduce false measurements, which can evade existing Bad Data Detection (BDD) algorithms and lead to incorrect state estimation. This kind of attack is stealthy and widely known as an Undetected False Data Injection (UFDI) attack. Attackers are limited by different attributes, in terms of knowledge, capabilities, resources, and attack targets, that are important to consider for realizing the potential attack vectors and, thereby, the security measures. In this paper, we present a formal framework for automatic synthesis of security architectures that will guard the grid against potential UFDI attacks on state estimation. In this approach, we first formalize UFDI attacks with respect to the grid topology, electrical properties, and different attack attributes. The solution to the model derives the attack vectors that exist in the formalized scenario. These attack vectors are considered by a second formal model, the security architecture synthesis model, to design the security measures (i.e., a set of measurements to be protected against false data injection). We enhance the performance of the security architecture synthesis mechanism by performing parallel and stepped execution of the formal models. We demonstrate the proposed mechanism through case studies and evaluate the performance of the proposed model by running experiments on different IEEE test systems. (C) 2019 Elsevier Ltd. All rights reserved.
机译:状态估计对于安全,可靠和有效地维护电网非常重要。如果状态估计未得到保护,则攻击者可能会破坏仪表或通信系统并引入错误的测量结果,从而可能逃避现有的不良数据检测(BDD)算法,并导致错误的状态估计。这种攻击是隐式的,被广泛称为未检测到的虚假数据注入(UFDI)攻击。攻击者在知识,能力,资源和攻击目标方面受到不同属性的限制,这对于实现潜在的攻击媒介以及安全措施至关重要。在本文中,我们提出了一个自动综合的安全体系结构的正式框架,它将保护网格免受状态估计中潜在的UFDI攻击。在这种方法中,我们首先就网格拓扑结构,电气特性和不同的攻击属性来正式确定UFDI攻击。该模型的解决方案导出了形式化场景中存在的攻击向量。第二种形式化模型,即安全体系结构综合模型,考虑了这些攻击媒介,以设计安全措施(即,一组保护措施以防止错误数据注入)。通过执行形式模型的并行和逐步执行,我们增强了安全体系结构综合机制的性能。我们通过案例研究证明了所提出的机制,并通过在不同的IEEE测试系统上运行实验来评估所提出模型的性能。 (C)2019 Elsevier Ltd.保留所有权利。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号