CPS: Small: Data-driven Real-time Data Authentication in Wide-Area Energy Infrastructure Sensor Networks

电网是一个大型动态信息物理系统，对现代社会至关重要。为了确保其可靠运行，广域监测和控制系统至关重要，以提供对系统动态的实时了解，从而可以实时采取适当的控制行动，以响应电力系统的干扰并避免停电。与许多其他cps一样，由于监测和控制协议缺乏安全属性，电网容易受到数据欺骗攻击。考虑到电力系统动态的快速变化，传统的密码技术的计算负担和时间延迟对于众多的电力系统设备来说是难以忍受的。本项目拟开发基于时空签名的方法和工具，有效验证电网广域测量数据，有效防止恶意网络攻击造成灾难性损失。通过提供数据认证工具来检测网络攻击，该项目将提供一种新的途径，利用CPS本身的测量数据来保护广域高动态闭环实时CPS的安全性。该项目将对电网安全产生立竿见影的积极影响，也将有利于其他紧密耦合、物理分布的cps。该计划亦将为K-12及STEM学生提供许多教育资源和机会，以扩大他们对工程的参与。该项目的主要目标是解决电力系统网络安全问题，并帮助保护电力系统免受现有技术难以检测的数据欺骗攻击。项目组发现，电网广域监测系统（WAMS）测量数据具有由各局部电网连续和随机状态变化的自然响应而产生的时空特征。这些签名几乎不可能伪造，因此非常适合用于数据身份验证。该项目将首次在高数据速率（高达每秒1500个样本）测量中使用签名来开发数据驱动的网络物理安全工具。实现项目目标的主要步骤包括：(1)研究有效提取WAMS测量中嵌入的时空特征的方法；(2)开发大量WAMS测量数据的实时认证方法和工具；(3)在实际的网络物理系统FNET/GridEye上在线实现和演示网络攻击检测技术。有了安全的网络系统提供的可靠的实时信息，电力系统运营商将能够评估系统风险或采取迅速行动来控制和减轻风险，防止停电。安全的网络系统还将确保物理电力系统处于由自动控制器确定的适当控制之下，以防止系统进入危险状态。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The electric power grid is a large-scale dynamic cyber-physical systems (CPS) and it is critical to the modern society. To ensure its reliable operation, wide-area monitoring and control systems are essential to provide real-time understanding of the system dynamics such that proper control actions can be taken in real time to respond to power system disturbances and avoid blackouts. Like many other CPSs, power grids are vulnerable to data spoofing attacks due to the lack of security properties in monitoring and control protocols. Conventional cryptography techniques are not usable because the computation burden and time delay are intolerable to numerous power system devices considering the fast-changing system dynamics. This project proposes to develop spatial and temporal signature-based methods and tools that efficiently authenticate power grid wide-area measurements and effectively prevent malicious cyber-attacks from causing catastrophic losses. By delivering data authentication tools to detect cyber-attacks, this project will provide a new path that leverages measurement data from CPS itself to protect the security of wide-area highly-dynamic closed-loop real-time CPS. This project will have immediate positive impacts on electric power grid security and will also be beneficial to other tightly-coupled, physically-distributed CPSs. The project will also provide many educational resources and opportunities for K-12 and STEM students to broaden their participation in engineering.The project's primary goal is to address power system cyber security issues and help protect the power system from data spoofing attacks that are hard to detect by existing technologies. The project team discovered that power grid wide-area monitoring system (WAMS) measurement data have spatial and temporal signatures caused by natural responses of each local grid's continuous and random condition changes. These signatures are almost impossible to counterfeit, making them perfect for data authentication. This project will be the first time to use signatures in high data rate (up to 1,500 sample per second) measurements to develop data-driven cyber-physical security tools. Major steps to achieve the project goal include: (1) investigate methods to extract spatial and temporal signatures embedded in WAMS measurements efficiently; (2) develop methods and tools for authenticating a large volume of WAMS measurement data in real time; and (3) online implement and demonstrate cyber-attack detection technologies on FNET/GridEye, which is an actual cyber-physical system. With credible real-time information provided by the secure cyber system, power system operators will be able to assess system risks or take prompt actions to control and mitigate risks and prevent blackouts. The secured cyber system will also ensure the physical power system is under appropriate controls determined by automatic controllers to prevent systems entering dangerous status.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.