Bilevel Model for Protection-Branch Measurements-Based Topology Attack Against DC and AC State Estimations

Abstract

A topology attack, as a special class of false data injection attacks, tampers with topology information of a system to mislead the decision of the control center. This article conducts an in-depth study on topology attacks that aim to interfere with the judgment in topology information and pose potential damage by tampering with measurement data and protection information on branches, namely, protection-branch measurements-based topology attacks (PBT attacks). To achieve PBT attacks in actual networks, we study the protection settings and mechanisms in term of branches including transformers and transmission lines. Then, for the first time, we develop a bilevel model based on the protection configuration from the perspective of security-constrained economic dispatch. Meanwhile, since a bilevel model is constructed against dc state estimation, a conversion method in constructing attack vectors under PBT attacks against ac power system is proposed, which makes PBT attacks more suitable for actual power systems and more concealed. In a set of case studies on an IEEE 14-bus system, the simulation results verify the effectiveness of the model we proposed, analyze the vulnerability of network under PBT attacks, and then identify some critical branches that are defended to cope with PBT attacks. In addition, the comparison between PBT attacks and traditional cyber-overloaded attacks also shows a stronger threat of the studied attacks.

Detection of False Data Injection Attacks on Smart Grids Based on A-BiTG Approach

“…However, due to the large-scale integration of smart terminals and the transmission of data through networks by numerous smart devices, the continuous improvement of the intelligent level of the power grid also provides rich attack entrances for malicious attackers. This makes the grid more vulnerable to network attacks, such as denial-of-service attacks [3], replay attacks [4], topological tampering attacks [5], and false data injection attacks (FDIAs) [6].…”