Cyber-physical System Modelling for Cyber-security Analysis in Electricity Systems

该博士项目旨在为电力系统开发一个全面的网络物理模型框架，以分析网络安全对未来低碳系统的可靠性和复原力的影响。具体地说，该项目旨在通过开发新的网络攻击形式和专有防御形式来加强电力系统的网络物理安全。本项目旨在为电力系统的安全保障提供直接的应用。从某种意义上说，这项工作是与ESPRC的能源、工程和信息通信技术战略主题进行多学科互动，研究领域的应用涉及控制工程、信息通信技术、数字信号处理和能源网络。具体地说，学生将专注于虚假数据注入攻击的问题，以及如何通过移动目标防御(MTDS)的新应用，使用物理系统资产本身来规避这些攻击。重点领域将包括目标选择、通过概率和分析方法进行攻击检测、在发生攻击时发展后备状态以及应用与网络攻击有关的数据分析。为了实施这项研究，学生将首先对电力系统网络安全领域的最新期刊和会议论文进行文献回顾。然后，他们将为他们希望解决的问题设计一个数学公式，并使用电力系统仿真工具(如MATPOWER和SIMULINK)来创建系统受到攻击的模型，并评估适当的防御策略。在博士学位的第一年，已向IEEE会刊提交了一篇关于利用降维和DBSCAN聚类法加强外国直接投资攻击的期刊论文供审查。这篇论文(目前正在进行第二轮修正)在电力系统的攻击和防御方面都做出了贡献，重点是通过对抗传统的MTD来加强网络攻击，并采用新的方法来增强MTD的弹性。研究重点是利用已有的系统资源，推动对复杂网络攻击的攻击检测，降低防御应用对系统的整体成本。展望未来，将探索与其他机构的合作，与清华大学合作开发学习网络攻击的专业拓扑。这项工作将建立在一些令人兴奋的领域，并可能在接近第二年结束时进行外国学生交换。此外，还将考虑将该研究商业化的可能性。网络安全作为一个领域最近受到了很多关注，CyberASAP等加速器为学者提供了将研究推向市场的场所。将探讨开发低成本的基于MULTOS的分布式状态估计和攻击检测分析工具的前景，并在该领域发表会议论文。

This PhD project aims to develop a holistic cyber-physical modelling framework for electricity system in order to analyse the impact of cyber-security on the reliability and resilience of future low carbon systems. Specifically, the project aims to enhance cyber-physical security in power systems through the development of novel forms of cyber-attack and proprietary forms of defence. This project aims to have direct applications for the security of power systems. In a sense the work is multi-disciplinary interacting with the ESPRC strategic themes of Energy, Engineering and ICT with research area applications across control engineering, ICT, digital signal processing and energy networks. Specifically, the studentship will focus on the problem of False Data Injection attacks and how they can be circumvented using the physical system assets themselves via novel application of Moving Target Defences (MTDs). Areas of focus will include target selection, attack detection via probabilistic and analytics methods, developing fall-back states in case of attack and the application of data analytics with respect to cyber-attacks. To implement the research the student will first engage in literature review of the state-of-the-art journal and conference papers in the field of cyber-security for power systems. They will then devise a mathematical formulation for the problem they wish to solve and use power system simulation tools (such as MATPOWER and Simulink) to create models of systems under attack and evaluate appropriate defence strategies. In the first year of the PhD, a journal paper has been submitted for review to IEEE transactions on making use of dimensionality reduction and DBSCAN clustering to enhance FDI attacks. The paper (currently subject to 2nd round of corrections) made contributions in both the attack and defence of power systems and focused on enhancing cyber-attacks by countering conventional MTD and employing new ways of enhancing MTD to be resilient. The paper focused on using system assets already in place to drive attack detection of sophisticated cyber-attacks and reduce the overall cost to the system from the application of defence.Going forward, collaboration with other institutions will be explored with the development of a specialised topology learning cyber-attack in combination with Tsinghua University. This work will build on a number of exciting areas and may culminate with a foreign student exchange toward the end of the 2nd year. Also, considerations for potential commercialisation of the research will also be made. Cyber-Security as a field has received much focus recently with accelerators such as CyberASAP offering venues for academics to bring research to market. The prospect of developing a low cost Multos based analytic tool for distributed state estimation and attack detection will be explored and a conference paper published in this area.