Assessing and mitigating impact of time delay attack : case studies for power grid controls

Due to recent cyber attacks on various cyber-physical systems (CPSes), traditional isolation based security schemes in the critical systems are insufficient to deal with the smart adversaries in CPSes with advanced information and communication technologies (ICTs). In this paper, we develop real-tim...

Full description

Saved in:
Bibliographic Details
Main Authors: Lou, Xin, Tran, Cuong, Tan, Rui, Yau, David K. Y., Kalbarczyk, Zbigniew T., Banerjee, Ambarish Kumar, Ganesh, Prakhar
Other Authors: School of Computer Science and Engineering
Format: Article
Language:English
Published: 2021
Subjects:
Online Access:https://hdl.handle.net/10356/148582
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Nanyang Technological University
Language: English
id sg-ntu-dr.10356-148582
record_format dspace
spelling sg-ntu-dr.10356-1485822021-04-30T01:59:25Z Assessing and mitigating impact of time delay attack : case studies for power grid controls Lou, Xin Tran, Cuong Tan, Rui Yau, David K. Y. Kalbarczyk, Zbigniew T. Banerjee, Ambarish Kumar Ganesh, Prakhar School of Computer Science and Engineering Engineering::Computer science and engineering Power Grid Control Cyber-physical System Due to recent cyber attacks on various cyber-physical systems (CPSes), traditional isolation based security schemes in the critical systems are insufficient to deal with the smart adversaries in CPSes with advanced information and communication technologies (ICTs). In this paper, we develop real-time assessment and mitigation of an attack's impact as a system's built-in mechanisms. We study a general class of attacks, which we call time delay attack, that delays the transmissions of control data packets in the CPS control loops. Based on a joint stability-safety criterion, we propose the attack impact assessment consisting of (i) a machine learning (ML) based safety classification, and (ii) a tandem stability-safety classification that exploits a basic relationship between stability and safety, namely that an unstable system must be unsafe whereas a stable system may not be safe. In this assessment approach, the ML addresses a state explosion problem in the safety classification, whereas the tandem structure reduces false negatives in detecting unsafety arising from imperfect ML. We apply our approach to assess the impact of the attack on power grid automatic generation control, and accordingly develop a two-tiered mitigation that tunes the control gain automatically to restore safety where necessary and shed load only if the tuning is insufficient. We also apply our attack impact assessment approach to a thermal power plant control system consisting of two PID control loops. A mitigation approach by tuning the PID controller is also proposed. Extensive simulations based on a 37-bus system model and a thermal power plant control system are conducted to evaluate the effectiveness of our assessment and mitigation approaches. Energy Market Authority (EMA) Nanyang Technological University National Research Foundation (NRF) Accepted version This work was supported in part by the National Research Foundation, Prime Minister’s Office, Singapore, under its Campus for Research Excellence and Technological Enterprise (CREATE) programme, in part by the Energy Innovation Research Programme (EIRP) administered by the Energy Market Authority (EMA), under Award NRF2014EWTEIRP002-026 and Award NRF2017EWTEP003-061, in part by the Device and System-level Detection and Identification of IoT Attacks, funded by SUTD-ZJU IDEA programme, under Award SUTD-ZJU (VP) 201805, and in part by the NTU Start-up Grant. 2021-04-30T01:59:24Z 2021-04-30T01:59:24Z 2019 Journal Article Lou, X., Tran, C., Tan, R., Yau, D. K. Y., Kalbarczyk, Z. T., Banerjee, A. K. & Ganesh, P. (2019). Assessing and mitigating impact of time delay attack : case studies for power grid controls. IEEE Journal On Selected Areas in Communications, 38(1), 141-155. https://dx.doi.org/10.1109/JSAC.2019.2951982 0733-8716 0000-0001-8910-5666 0000-0001-8441-9973 0000-0001-8695-4128 https://hdl.handle.net/10356/148582 10.1109/JSAC.2019.2951982 2-s2.0-85074812977 1 38 141 155 en NRF2014EWTEIRP002-026 NRF2017EWTEP003-061 IEEE Journal on Selected Areas in Communications © 2019 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works. The published version is available at: https://doi.org/10.1109/JSAC.2019.2951982. application/pdf
institution Nanyang Technological University
building NTU Library
continent Asia
country Singapore
Singapore
content_provider NTU Library
collection DR-NTU
language English
topic Engineering::Computer science and engineering
Power Grid Control
Cyber-physical System
spellingShingle Engineering::Computer science and engineering
Power Grid Control
Cyber-physical System
Lou, Xin
Tran, Cuong
Tan, Rui
Yau, David K. Y.
Kalbarczyk, Zbigniew T.
Banerjee, Ambarish Kumar
Ganesh, Prakhar
Assessing and mitigating impact of time delay attack : case studies for power grid controls
description Due to recent cyber attacks on various cyber-physical systems (CPSes), traditional isolation based security schemes in the critical systems are insufficient to deal with the smart adversaries in CPSes with advanced information and communication technologies (ICTs). In this paper, we develop real-time assessment and mitigation of an attack's impact as a system's built-in mechanisms. We study a general class of attacks, which we call time delay attack, that delays the transmissions of control data packets in the CPS control loops. Based on a joint stability-safety criterion, we propose the attack impact assessment consisting of (i) a machine learning (ML) based safety classification, and (ii) a tandem stability-safety classification that exploits a basic relationship between stability and safety, namely that an unstable system must be unsafe whereas a stable system may not be safe. In this assessment approach, the ML addresses a state explosion problem in the safety classification, whereas the tandem structure reduces false negatives in detecting unsafety arising from imperfect ML. We apply our approach to assess the impact of the attack on power grid automatic generation control, and accordingly develop a two-tiered mitigation that tunes the control gain automatically to restore safety where necessary and shed load only if the tuning is insufficient. We also apply our attack impact assessment approach to a thermal power plant control system consisting of two PID control loops. A mitigation approach by tuning the PID controller is also proposed. Extensive simulations based on a 37-bus system model and a thermal power plant control system are conducted to evaluate the effectiveness of our assessment and mitigation approaches.
author2 School of Computer Science and Engineering
author_facet School of Computer Science and Engineering
Lou, Xin
Tran, Cuong
Tan, Rui
Yau, David K. Y.
Kalbarczyk, Zbigniew T.
Banerjee, Ambarish Kumar
Ganesh, Prakhar
format Article
author Lou, Xin
Tran, Cuong
Tan, Rui
Yau, David K. Y.
Kalbarczyk, Zbigniew T.
Banerjee, Ambarish Kumar
Ganesh, Prakhar
author_sort Lou, Xin
title Assessing and mitigating impact of time delay attack : case studies for power grid controls
title_short Assessing and mitigating impact of time delay attack : case studies for power grid controls
title_full Assessing and mitigating impact of time delay attack : case studies for power grid controls
title_fullStr Assessing and mitigating impact of time delay attack : case studies for power grid controls
title_full_unstemmed Assessing and mitigating impact of time delay attack : case studies for power grid controls
title_sort assessing and mitigating impact of time delay attack : case studies for power grid controls
publishDate 2021
url https://hdl.handle.net/10356/148582
_version_ 1698713731247112192