CRII: CPS: Noninvasive Security Analysis for Smart Grid Energy Management System

智能电网系统是复杂的，因为它结合了新旧技术，并依赖于不同的网络和物理组件。由于智能电网的复杂性，由于配置错误和缺乏安全措施，智能电网更容易受到攻击。因此，必须通过识别潜在威胁及其影响，并找到经济实惠的解决方案来防御已识别的威胁，确保智能电网的安全和弹性运行。本研究旨在通过为智能电网核心组件能源管理系统（EMS）开发有效的安全分析框架来实现这些目标。所提出的研究的智力价值在于通过将不同的理论，如形式验证，模型仿真，数据和控制流以及安全概念整合到CPS组件中，推进了信息物理系统（CPS）的安全分析科学。这项工作将通过以下方式为CPS安全科学做出贡献：(a)为隐形攻击验证开发一个全面的正式模型；(b)设计一个有效的机制，系统地执行面向影响的威胁分析。虽然这项研究的目标是智能电网中的EMS，但该方法足够广泛，可以推广到其他利用基于测量的估计的CPS控制回路。CPS和电网一样，对国家基础设施至关重要，要求它们安全可靠，尤其是随着网络战的增加。本研究旨在解决CPS安全性分析的迫切需求。除了技术项目贡献外，还将开发关于CPS安全的研究生和本科生课程模块。将通过地方和外联活动，鼓励代表性不足的学生和少数民族学生参与该项目。该项目的结果将通过同行评议的期刊文章和会议论文在研究界广泛宣传。

A smart grid system is complicated because it combines new and old technologies and is dependent on different cyber and physical components. Because it is complicated, a smart grid is more likely to be attacked due to misconfigurations and lacking security measures. Therefore, the secure and resilient operation of smart grids must be ensured by identifying potential threats and their impact and finding affordable solutions to defend against identified threats. This research aims to achieve these goals through the development of an efficient security analysis framework for the Energy Management System (EMS), a core smart grid component. The intellectual merit of the proposed research lies in advancing the science of security analysis for Cyber-Physical Systems (CPS) by integrating different theories, such as formal verification, model simulation, data and control flow, and security concepts, into the CPS components. This work will contribute to the CPS security science by: (a) developing a comprehensive formal model for stealthy attack verifications and (b) designing an efficient mechanism for systematically performing the impact-oriented threat analysis. Although this research targets EMS in smart grids, the approach is broad enough to be generalized for other CPS control loops that utilize measurement-based estimation.CPS, like power grids, are critical to the national infrastructure, requiring that they be secure and dependable, especially with the increase of cyberwarfare. This research aims to address the urgent need to analyze CPS security. In addition to the technical project contributions, graduate and undergraduate level course modules on CPS security will also be developed. Underrepresented and minority students will be encouraged, through local and outreach activities, to participate in the project. Results of this project will be widely publicized in the research community through peer-reviewed journals articles and conference papers.