Cyber-physical System Modelling for Cyber-security Analysis in Electricity Systems

该博士项目旨在为电力系统开发一个整体的网络物理建模框架，以分析网络安全对未来低碳系统可靠性和弹性的影响。具体而言，该项目旨在通过开发新型网络攻击形式和专有防御形式来增强电力系统的网络物理安全。该项目旨在为电力系统的安全提供直接应用。从某种意义上说，这项工作是多学科的，与ESPRC的能源、工程和信息通信技术战略主题相互作用，研究领域应用于控制工程、信息通信技术、数字信号处理和能源网络。具体来说，学生将专注于虚假数据注入攻击的问题，以及如何通过移动目标防御（MTDs）的新应用，使用物理系统资产本身来规避它们。重点领域将包括目标选择，通过概率和分析方法进行攻击检测，在攻击情况下开发后备状态以及有关网络攻击的数据分析应用。为了实施这项研究，学生将首先对电力系统网络安全领域的最新期刊和会议论文进行文献综述。然后，他们将为他们希望解决的问题设计一个数学公式，并使用电力系统仿真工具（如MATPOWER和Simulink）创建受攻击系统的模型，并评估适当的防御策略。在博士的第一年，一篇关于利用降维和DBSCAN聚类来增强FDI攻击的期刊论文已经提交给IEEE transactions进行评审。该论文（目前正在进行第二轮修正）在电力系统的攻击和防御方面都做出了贡献，并着重于通过对抗传统的MTD和采用增强MTD的新方法来增强网络攻击。本文的重点是利用已有的系统资产来驱动复杂网络攻击的攻击检测，并降低防御应用对系统的总体成本。展望未来，将与其他机构合作，与清华大学合作开发专门的拓扑学习网络攻击。这项工作将建立在一些令人兴奋的领域，并可能在第二年末的外国学生交换中达到高潮。此外，还将考虑研究的潜在商业化。网络安全作为一个领域最近受到了很多关注，CyberASAP等加速器为学者提供了将研究成果推向市场的场所。开发一种低成本的基于Multos的分析工具用于分布式状态估计和攻击检测的前景将被探讨，并在该领域发表一篇会议论文。

This PhD project aims to develop a holistic cyber-physical modelling framework for electricity system in order to analyse the impact of cyber-security on the reliability and resilience of future low carbon systems. Specifically, the project aims to enhance cyber-physical security in power systems through the development of novel forms of cyber-attack and proprietary forms of defence. This project aims to have direct applications for the security of power systems. In a sense the work is multi-disciplinary interacting with the ESPRC strategic themes of Energy, Engineering and ICT with research area applications across control engineering, ICT, digital signal processing and energy networks. Specifically, the studentship will focus on the problem of False Data Injection attacks and how they can be circumvented using the physical system assets themselves via novel application of Moving Target Defences (MTDs). Areas of focus will include target selection, attack detection via probabilistic and analytics methods, developing fall-back states in case of attack and the application of data analytics with respect to cyber-attacks. To implement the research the student will first engage in literature review of the state-of-the-art journal and conference papers in the field of cyber-security for power systems. They will then devise a mathematical formulation for the problem they wish to solve and use power system simulation tools (such as MATPOWER and Simulink) to create models of systems under attack and evaluate appropriate defence strategies. In the first year of the PhD, a journal paper has been submitted for review to IEEE transactions on making use of dimensionality reduction and DBSCAN clustering to enhance FDI attacks. The paper (currently subject to 2nd round of corrections) made contributions in both the attack and defence of power systems and focused on enhancing cyber-attacks by countering conventional MTD and employing new ways of enhancing MTD to be resilient. The paper focused on using system assets already in place to drive attack detection of sophisticated cyber-attacks and reduce the overall cost to the system from the application of defence.Going forward, collaboration with other institutions will be explored with the development of a specialised topology learning cyber-attack in combination with Tsinghua University. This work will build on a number of exciting areas and may culminate with a foreign student exchange toward the end of the 2nd year. Also, considerations for potential commercialisation of the research will also be made. Cyber-Security as a field has received much focus recently with accelerators such as CyberASAP offering venues for academics to bring research to market. The prospect of developing a low cost Multos based analytic tool for distributed state estimation and attack detection will be explored and a conference paper published in this area.