Modeling an Attack-Mitigation Dynamic Game-Theoretic Scheme for Security Vulnerability Analysis in a Cyber-Physical Power System

Abstract

The rapid development of advanced information and communication technology has made modern power systems evolve into more complicated cyber-physical power systems (CPPSs) with mutual coupling characteristics between cyber systems and power systems, and at the same time, the CPPSs have to confront some newly emerged risks owing to cyber system unreliability or cyberattacks. In this paper, regarding the cyber and physical attacks in a CPPS, the operation risks and vulnerabilities of transmission lines are discussed in detail by building relevant game-theoretic models. Under two possible cyberattack scenarios, namely time delay of system recovery and distributed denial of service, a three-stage defenderattacker-defender tri-level mathematical programming model is proposed based on dynamic game theory of complete information. In particular, the objective functions and corresponding constraint conditions in each level are analyzed and constructed elaborately. For the solution of this proposed tri-level programming model, a solution method based on an improved particle swarm optimization approach combined with sequential quadratic programming technique is applied during analysis. Finally, the proposed model is validated through two case studies, and some preliminary concluding remarks are summarized. INDEX TERMS Cyber-physical power system, dynamic game with complete information, tri-level programming, vulnerability analysis, particle swarm optimization.

Cyber–physical security for on‐going smart grid initiatives: a survey

“…The main focus of [46] is to define the formulation of the attack vector with prevention and detection mechanisms for various components, thus cohesively providing countermeasures against cyber–physical security threats. The vulnerabilities and operational threats of transmission lines are considered in [47] regarding cyber and physical attacks in a cyber–physical power network by constructing specific game‐theoretical models.…”

A General Framework to Understand Vulnerabilities in Information Systems

“…Existing studies have addressed the subjects of vulnerability identification in information systems [4], [5], threat analysis for secure software design [6], topic analysis in software repositories [7], management issues related to vulnerabilities in information systems [8], economic issues in the black market of information security threats [9], security vulnerability analysis in different applications, e.g., power systems [10], [11], fog computing-enabled robust demand response with consideration of collusion attacks in the Internet of Energy [12], cross-lingual multi-keyword ranked search with semantic extensions over encrypted data [13], and posters' behavior in online forums [14]. However, so far, there have been few in-depth studies on vulnerabilities dealing with the automated classification and risk-level prediction of vulnerabilities and the automated generation of solutions for various types of vulnerabilities in software and information systems.…”

“…Features are extracted from three dimensions: TD-IDF with bigrams, key topics, and record-level statistics, as discussed in detail in Section IV. We conduct experiments for different topic numbers (10,20,30,40, and 50) in this research. We present the classification and prediction results when the topic number is 30 for the following reasons: (1) The classification and prediction performance are similar for different topic numbers.…”

Pattern Analysis of Topological Attacks in Cyber-Physical Power Systems Considering Cascading Outages

“…Malicious attacks can be divided into three types, namely False Data Injection Attack (FDIA) [3], False Command Injection Attack (FCIA) [4] and Distributed Denial of Service (DDoS) attack [5] [6]. The former two refer to unauthorized agents intruding a system and falsifying its data.…”