Defense Strategy Against Load Redistribution Attacks on Power Systems Considering Insider Threats
Defense Strategy Against Load Redistribution Attacks on Power Systems Considering Insider Threats
复制标题
DOI：
10.1109/tsg.2020.3023426
复制
发表时间：
2021-03-01
影响因子：
9.6
通讯作者：
Wang, Lingfeng
中科院分区：
文献类型：
--
作者：
Liu, Zhaoxi;Wang, Lingfeng
近年来，网络安全已成为影响电力系统正常运行的关键问题之一。与此同时，内部威胁被认为是网络安全研究中的一个战略性和严峻的挑战，引起了越来越多的关注。本文建立了考虑内部威胁的电力系统负荷重分布攻击的详细模型。用安全资源分配博弈模型描述了LR攻击问题。该博弈模型考虑了系统操作员的防御策略由内部人向外部攻击者的信息泄露。计算了系统操作员和攻击者在内部人在场的情况下的最优策略，以最大化自己的收益。在此基础上，利用所提出的安全资源分配博弈模型研究了内部人员在LR攻击中的影响。基于IEEE 39节点和IEEE 118节点测试系统的算例分析验证了所提模型的有效性。案例研究的结果表明，内部人员的信息泄露会增加攻击者在LR攻击中的回报。即使信息泄露的概率很小，对电网的破坏也可能是相当大的。该防御策略能够降低系统在因内部威胁导致信息泄露的LR攻击下的预期运行成本。
In recent years, cybersecurity is emerging as one of the most critical problems to the normal operation of power systems. Meanwhile, insider threats are considered as a strategic and serious challenge in the cybersecurity research and have attracted increasing attention. In this article, the detailed model of load redistribution (LR) attacks against the power systems considering the presence of insider threats is developed. The LR attack problem is formulated with a security resource allocation game model. Information leakage of the system operator's defense strategy by the insider to the external attacker is considered in the proposed game model. The optimal strategies of both the system operator and attacker in the presence of the insider are calculated to maximize their own payoffs. In so doing, the impacts of the insider in the LR attacks can be investigated with the proposed security resource allocation game model. Case studies based on the IEEE 39-bus and IEEE 118-bus test systems were conducted to validate the proposed model. The results of the case studies show that the information leakage by the insider will increase the payoff of the attacker in the LR attacks. The damage on the grid can be considerable even if the information leakage probability is small. The proposed defense strategy is able to reduce the expected operation cost of the system under the LR attacks with the information leakage due to the insider threats.