Random-Enabled Hidden Moving Target Defense against False Data Injection Alert Attackers
Random-Enabled Hidden Moving Target Defense against False Data Injection Alert Attackers
复制标题
DOI：
10.3390/pr11020348
复制
发表时间：
2023-01
期刊：
影响因子：
3.5
通讯作者：
Bo Liu;Hongyu Wu;Qihui Yang;Hang Zhang
中科院分区：
文献类型：
--
作者：
Bo Liu;Hongyu Wu;Qihui Yang;Hang Zhang
隐藏移动目标防御（HMTD）是一种主动防御策略，通过改变传输线的电抗来阻止虚假数据注入（FDI）攻击，从而使攻击者保持隐藏。然而，具有强大能力的警觉攻击者对HMTD构成额外的风险，因此，迫切需要评估HMTD的隐藏性。本文首先总结了现有的两种警报攻击模型，基于坏数据检测的警报攻击者和数据驱动的警报攻击者。此外，本文提出了一种新的基于模型的警报攻击模型，使用MTD运行模型来估计调度线路电抗。所提出的攻击者模型可以使用估计的线路电抗来构造针对缺乏随机性的HMTD方法的隐形FDI攻击。我们提出了一种新的随机启用HMTD（RHMTD）操作方法，它利用随机权重引入随机性，并使用派生的隐藏操作条件作为约束。RHMTD理论上被证明是隐藏的三个警报攻击模型。此外，我们分析了RHMTD对三种警报攻击模型的检测效果。在IEEE 14节点系统上的仿真结果表明，传统的HMTD方法不能检测到基于模型的攻击者的攻击，而RHMTD对三个攻击者具有隐藏性，能有效检测到三个攻击者的攻击。
Hidden moving target defense (HMTD) is a proactive defense strategy that is kept hidden from attackers by changing the reactance of transmission lines to thwart false data injection (FDI) attacks. However, alert attackers with strong capabilities pose additional risks to the HMTD and thus, it is much-needed to evaluate the hiddenness of the HMTD. This paper first summarizes two existing alert attacker models, i.e., bad-data-detection-based alert attackers and data-driven alert attackers. Furthermore, this paper proposes a novel model-based alert attacker model that uses the MTD operation models to estimate the dispatched line reactance. The proposed attacker model can use the estimated line reactance to construct stealthy FDI attacks against HMTD methods that lack randomness. We propose a novel random-enabled HMTD (RHMTD) operation method, which utilizes random weights to introduce randomness and uses the derived hiddenness operation conditions as constraints. RHMTD is theoretically proven to be kept hidden from three alert attacker models. In addition, we analyze the detection effectiveness of the RHMTD against three alert attacker models. Simulation results on the IEEE 14-bus systems show that traditional HMTD methods fail to detect attacks by the model-based alert attacker, and RHMTD is kept hidden from three alert attackers and is effective in detecting attacks by three alert attackers.