CPS: Small: Data-driven Real-time Data Authentication in Wide-Area Energy Infrastructure Sensor Networks

电网是一个大规模动态的网络物理系统，对现代社会至关重要。为了确保其可靠运行，广域监测和控制系统必须实时了解系统动态，以便能够实时采取适当的控制措施，以响应电力系统扰动，避免停电。与许多其他CPSS一样，由于监控协议缺乏安全属性，电网很容易受到数据欺骗攻击。考虑到快速变化的系统动态，许多电力系统设备无法忍受传统的密码技术，因为计算负担和时延是无法忍受的。该项目提出开发基于空间和时间签名的方法和工具，高效地认证电网广域测量，并有效地防止恶意网络攻击造成灾难性损失。通过提供检测网络攻击的数据认证工具，该项目将提供一条利用CPS本身的测量数据来保护广域高动态闭环实时CPS的安全的新途径。该项目将对电网安全产生立竿见影的积极影响，也将对其他紧密耦合、物理分布的CPSS有利。该项目还将为K-12和STEM学生提供许多教育资源和机会，以扩大他们对工程的参与。该项目的主要目标是解决电力系统的网络安全问题，并帮助保护电力系统免受现有技术难以检测的数据欺骗攻击。项目组发现，电网广域监测系统(WAMS)的测量数据具有空间和时间特征，这是由于每个本地电网的连续和随机状态变化的自然响应造成的。这些签名几乎不可能被伪造，这使它们成为数据认证的完美选择。该项目将首次在高数据速率(高达1,500个样本/秒)测量中使用签名，以开发数据驱动的网络物理安全工具。实现项目目标的主要步骤包括：(1)研究有效地提取WAMS测量中嵌入的空间和时间特征的方法；(2)开发用于实时认证大量WAMS测量数据的方法和工具；(3)在FNET/GridEye这一实际的网络物理系统上在线实施和演示网络攻击检测技术。有了安全的网络系统提供的可靠实时信息，电力系统运营商将能够评估系统风险或迅速采取行动，控制和缓解风险，防止停电。安全的网络系统还将确保物理电力系统处于自动控制器确定的适当控制之下，以防止系统进入危险状态。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The electric power grid is a large-scale dynamic cyber-physical systems (CPS) and it is critical to the modern society. To ensure its reliable operation, wide-area monitoring and control systems are essential to provide real-time understanding of the system dynamics such that proper control actions can be taken in real time to respond to power system disturbances and avoid blackouts. Like many other CPSs, power grids are vulnerable to data spoofing attacks due to the lack of security properties in monitoring and control protocols. Conventional cryptography techniques are not usable because the computation burden and time delay are intolerable to numerous power system devices considering the fast-changing system dynamics. This project proposes to develop spatial and temporal signature-based methods and tools that efficiently authenticate power grid wide-area measurements and effectively prevent malicious cyber-attacks from causing catastrophic losses. By delivering data authentication tools to detect cyber-attacks, this project will provide a new path that leverages measurement data from CPS itself to protect the security of wide-area highly-dynamic closed-loop real-time CPS. This project will have immediate positive impacts on electric power grid security and will also be beneficial to other tightly-coupled, physically-distributed CPSs. The project will also provide many educational resources and opportunities for K-12 and STEM students to broaden their participation in engineering.The project's primary goal is to address power system cyber security issues and help protect the power system from data spoofing attacks that are hard to detect by existing technologies. The project team discovered that power grid wide-area monitoring system (WAMS) measurement data have spatial and temporal signatures caused by natural responses of each local grid's continuous and random condition changes. These signatures are almost impossible to counterfeit, making them perfect for data authentication. This project will be the first time to use signatures in high data rate (up to 1,500 sample per second) measurements to develop data-driven cyber-physical security tools. Major steps to achieve the project goal include: (1) investigate methods to extract spatial and temporal signatures embedded in WAMS measurements efficiently; (2) develop methods and tools for authenticating a large volume of WAMS measurement data in real time; and (3) online implement and demonstrate cyber-attack detection technologies on FNET/GridEye, which is an actual cyber-physical system. With credible real-time information provided by the secure cyber system, power system operators will be able to assess system risks or take prompt actions to control and mitigate risks and prevent blackouts. The secured cyber system will also ensure the physical power system is under appropriate controls determined by automatic controllers to prevent systems entering dangerous status.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.