Modeling and evaluation of cyber-attacks on grid-interactive efficient buildings
Modeling and evaluation of cyber-attacks on grid-interactive efficient buildings
复制标题
DOI：
10.1016/j.apenergy.2021.117639
复制
发表时间：
2021-12
期刊：
影响因子：
11.2
通讯作者：
Yangyang Fu;Zheng O’Neill;Z. Yang;V. Adetola;Jin Wen;Lingyu Ren;Tim Wagner;Qi Zhu;Terresa Wu
中科院分区：
文献类型：
--
作者：
Yangyang Fu;Zheng O’Neill;Z. Yang;V. Adetola;Jin Wen;Lingyu Ren;Tim Wagner;Qi Zhu;Terresa Wu
电网交互高效建筑（geb）不仅面临被动威胁（如物理故障），也面临主动威胁（如基于网络的控制系统的网络攻击）。网络攻击对GEB运行的影响尚未完全了解，特别是对网格服务的性能。为了量化网络攻击对GEB的影响，本文提出了一个包含不同网络攻击模型和关键性能指标的建模和仿真框架，以量化网络攻击下GEB的运行性能。该框架通过数值演示来模拟和评估网络攻击，例如数据入侵攻击和拒绝服务攻击，这些攻击发生在典型的中型办公楼上，该办公楼使用BACnet/IP协议进行通信网络。仿真结果表明，虽然不同类型的攻击可能对建筑系统造成不同程度的危害，但通过远程控制冷水机进行的攻击对建筑系统的运行（包括建筑服务和电网服务）产生最严重的后果。还指出，网络攻击在攻击期间和攻击后期间对建筑系统的影响，这表明应考虑两个时期以充分评估网络攻击的后果。
Grid-interactive efficient buildings (GEBs) are not only exposed to passive threats (e.g., physical faults) but also active threats such as cyber-attacks launched on the network-based control systems. The impact of cyber-attacks on GEB operation are not yet fully understood, especially as regards the performance of grid services. To quantify the consequences of cyber-attacks on GEBs, this paper proposes a modeling and simulation framework that includes different cyber-attack models and key performance indexes to quantify the performance of GEB operation under cyber-attacks. The framework is numerically demonstrated to model and evaluate cyber-attacks such as data intrusion attacks and Denial-of-Service attacks on a typical medium-sized office building that uses the BACnet/IP protocol for communication networks. Simulation results show that, while different types of attacks could compromise the building systems to different extents, attacks via the remote control of a chiller yield the most significant consequences on a building system’s operation, including both the building service and the grid service. It is also noted that a cyber-attack impacts the building systems during the attack period as well as the post-attack period, which suggests that both periods should be considered to fully evaluate the consequences of a cyber-attack.