CRII: CPS: Noninvasive Security Analysis for Smart Grid Energy Management System

智能电网系统是复杂的，因为它结合了新老技术，并依赖于不同的网络和物理组件。由于智能电网的复杂性，它更容易因配置错误和缺乏安全措施而受到攻击。因此，必须通过识别潜在的威胁及其影响，并找到负担得起的解决方案来抵御已确定的威胁，以确保智能电网的安全和弹性运行。本研究旨在实现这些目标，通过开发一个有效的安全分析框架的能源管理系统（EMS），一个核心的智能电网组件。所提出的研究的智力价值在于推进科学的安全分析的网络物理系统（CPS）集成不同的理论，如形式验证，模型仿真，数据和控制流，安全概念，到CPS组件。这项工作将有助于CPS安全科学：（a）开发一个全面的正式模型隐形攻击验证和（B）设计一个有效的机制，系统地执行面向影响的威胁分析。虽然这项研究的目标EMS在智能电网中，该方法是足够广泛的，以推广到其他CPS控制回路，利用基于测量的估计。CPS，像电网，是至关重要的国家基础设施，要求他们是安全和可靠的，特别是随着网络战的增加。本研究旨在解决CPS安全分析的迫切需要。除了技术项目的贡献，研究生和本科生水平的课程模块CPS安全也将开发。将通过地方和外联活动，鼓励代表性不足的学生和少数民族学生参加该项目。该项目的结果将通过同行评审的期刊、文章和会议论文在研究界广为宣传。

A smart grid system is complicated because it combines new and old technologies and is dependent on different cyber and physical components. Because it is complicated, a smart grid is more likely to be attacked due to misconfigurations and lacking security measures. Therefore, the secure and resilient operation of smart grids must be ensured by identifying potential threats and their impact and finding affordable solutions to defend against identified threats. This research aims to achieve these goals through the development of an efficient security analysis framework for the Energy Management System (EMS), a core smart grid component. The intellectual merit of the proposed research lies in advancing the science of security analysis for Cyber-Physical Systems (CPS) by integrating different theories, such as formal verification, model simulation, data and control flow, and security concepts, into the CPS components. This work will contribute to the CPS security science by: (a) developing a comprehensive formal model for stealthy attack verifications and (b) designing an efficient mechanism for systematically performing the impact-oriented threat analysis. Although this research targets EMS in smart grids, the approach is broad enough to be generalized for other CPS control loops that utilize measurement-based estimation.CPS, like power grids, are critical to the national infrastructure, requiring that they be secure and dependable, especially with the increase of cyberwarfare. This research aims to address the urgent need to analyze CPS security. In addition to the technical project contributions, graduate and undergraduate level course modules on CPS security will also be developed. Underrepresented and minority students will be encouraged, through local and outreach activities, to participate in the project. Results of this project will be widely publicized in the research community through peer-reviewed journals articles and conference papers.