An Intrusion Tolerance Assessment Method for Cyber-Physical Power System

doi:10.11930/j.issn.1004-9649.202111141

Abstract

Abstract: With the increasing integration of information and communication technology, the cyber-physical power system (CPPS) is facing not only uncertainties from the physical world but also threat from cyberspace. It is urgently needed for a method to assess the defensive capability of CPPS against cyber attacks. An assessment method is proposed for intrusion tolerance and optimal defense resource allocation of CPPS based on mean failure time and reliability. Firstly, a semi-Markov chain attack model is established for the advanced persistent threat (APT) to analyze the penetration process of attacks from cyber level to CPPS. Besides, a stochastic game model is adopted to dynamically describe the interaction process between attackers and defenders in CPPS, subsequently predicting the optimal strategy of attackers under Nash equilibrium, and determining the optimal defense strategy against malicious attacks. Finally, the effectiveness of the intrusion tolerance assessment method is verified through a CPPS security testbed, which shows that the intrusion tolerance capability has a significant role in the secure operation of the CPPS.

Key words: cyber-physical power system, cyber attack, intrusion tolerance, defense resource allocation, semi-Markov chain, stochastic game

YAO Pengchao, YAN Bingjing, Hao Weijie, YANG Qiang. An Intrusion Tolerance Assessment Method for Cyber-Physical Power System[J]. Electric Power, 2022, 55(4): 13-22.

Add to citation manager EndNote|Ris|BibTeX

URL: https://www.electricpower.com.cn/EN/10.11930/j.issn.1004-9649.202111141

https://www.electricpower.com.cn/EN/Y2022/V55/I4/13

References

[1] SRIDHAR S, HAHN A, GOVINDARASU M. Cyber–physical system security for the electric power grid[J]. Proceedings of the IEEE, 2012, 100(1): 210–224.
[2] 赵静波, 张思聪, 廖诗武. 美国加州2020年8月中旬停电事故分析及思考[J]. 电力工程技术, 2020, 39(6): 52–57
ZHAO Jingbo, ZHANG Sicong, LIAO Shiwu. Analysis and reflection for the rotating outages in mid-August 2020 in California[J]. Electric Power Engineering Technology, 2020, 39(6): 52–57
[3] 龚郗安. 关于委内瑞拉大停电事故的情况分析和关键基础设施的安全防护建议[J]. 信息技术与网络安全, 2019, 38(4): 1–2,14
GONG Xian. Analysis of Venezuela's blackouts and suggestions on network security of critical infrastructure[J]. Information Technology and Network Security, 2019, 38(4): 1–2,14
[4] 郭庆来, 辛蜀骏, 王剑辉, 等. 由乌克兰停电事件看信息能源系统综合安全评估[J]. 电力系统自动化, 2016, 40(5): 145–147
GUO Qinglai, XIN Shujun, WANG Jianhui, et al. Comprehensive security assessment for a cyber physical energy system: a lesson from Ukraine's blackout[J]. Automation of Electric Power Systems, 2016, 40(5): 145–147
[5] 胡源, 薛松, 张寒, 等. 近30年全球大停电事故发生的深层次原因分析及启示[J]. 中国电力, 2021, 54(10): 204–210
HU Yuan, XUE Song, ZHANG Han, et al. Cause analysis and enlightenment of global blackouts in the past 30 years[J]. Electric Power, 2021, 54(10): 204–210
[6] SHI L B, DAI Q S, NI Y X. Cyber-physical interactions in power systems: a review of models, methods, and applications[J]. Electric Power Systems Research, 2018, 163: 396–412.
[7] YOHANANDHAN R V, ELAVARASAN R M, MANOHARAN P, et al. Cyber-physical power system (CPPS): a review on modeling, simulation, and analysis with cyber security applications[J]. IEEE Access, 2020, 8: 151019–151064.
[8] 丁茂生, 王洪儒, 王超, 等. 信息物理视角下能源互联网可靠性评估方法综述[J]. 电网技术, 2021, 45(2): 425–436
DING Maosheng, WANG Hongru, WANG Chao, et al. Review of reliability assessments for energy Internet based on cyber physical integration[J]. Power System Technology, 2021, 45(2): 425–436
[9] 袁汉杰, 李更丰, 别朝红. 考虑信息物理融合的配电系统可靠性评估[J]. 智慧电力, 2017, 45(7): 51–57,82
YUAN Hanjie, LI Gengfeng, BIE Zhaohong. Distribution system reliability assessment considering cyber-physical integration[J]. Smart Power, 2017, 45(7): 51–57,82
[10] 朱炳铨, 郭逸豪, 郭创新, 等. 信息失效威胁下的电力信息物理系统安全评估与防御研究综述[J]. 电力系统保护与控制, 2021, 49(1): 178–187
ZHU Bingquan, GUO Yihao, GUO Chuangxin, et al. A survey of the security assessment and security defense of a cyber physical power system under cyber failure threat[J]. Power System Protection and Control, 2021, 49(1): 178–187
[11] HE R W, XIE H J, DENG J H, et al. Reliability modeling and assessment of cyber space in cyber-physical power systems[J]. IEEE Transactions on Smart Grid, 2020, 11(5): 3763–3773.
[12] LAU P, WEI W, WANG L F, et al. A cyber security insurance model for power system reliability considering optimal defense resource allocation[J]. IEEE Transactions on Smart Grid, 2020, 11(5): 4403–4414.
[13] LIU W X, GONG Q, HAN H, et al. Reliability modeling and evaluation of active cyber physical distribution system[J]. IEEE Transactions on Power Systems, 2018, 33(6): 7096–7108.
[14] MARASHI K, SARVESTANI S S, HURSON A R. Consideration of cyber-physical interdependencies in reliability modeling of smart grids[J]. IEEE Transactions on Sustainable Computing, 2018, 3(2): 73–83.
[15] 杨文丽. 计及可靠性评估的中压配电网规划方案比选[J]. 电力工程技术, 2018, 37(2): 13–19,43
YANG Wenli. Comparison and selection of MV distribution network planning schemes considering reliability assessment[J]. Electric Power Engineering Technology, 2018, 37(2): 13–19,43
[16] 田涛, 张兆君, 朱超, 等. 高压断路器储能弹簧的可靠性及寿命分析[J]. 电力工程技术, 2017, 36(5): 103–108
TIAN Tao, ZHANG Zhaojun, ZHU Chao, et al. Reliability and life analysis of energy-storing spring for high voltage circuit breaker[J]. Electric Power Engineering Technology, 2017, 36(5): 103–108
[17] 段军, 谢晔源, 姜田贵, 等. 模块化多电平换流阀可靠性研究与设计优化[J]. 电力工程技术, 2018, 37(2): 38–43
DUAN Jun, XIE Yeyuan, JIANG Tiangui, et al. Reliability research and design optimization of modular multilevel converter[J]. Electric Power Engineering Technology, 2018, 37(2): 38–43
[18] 袁汉杰, 李更丰, 龙涛, 等. 计及状态估计与可观性的电力系统可靠性评估[J]. 电网技术, 2019, 43(12): 4274–4283
YUAN Hanjie, LI Gengfeng, LONG Tao, et al. Power system reliability assessment considering state estimation and observability[J]. Power System Technology, 2019, 43(12): 4274–4283
[19] HUANG S, ZHOU C J, YANG S H, et al. Cyber-physical system security for networked industrial processes[J]. International Journal of Automation and Computing, 2015, 12(6): 567–578.
[20] ZIMBA A, CHEN H S, WANG Z S. Bayesian network based weighted APT attack paths modeling in cloud computing[J]. Future Generation Computer Systems, 2019, 96: 525–537.
[21] SHEN S G, HAN R S, GUO L Z, et al. Survivability evaluation towards attacked WSNs based on stochastic game and continuous-time Markov chain[J]. Applied Soft Computing, 2012, 12(5): 1467–1476.
[22] SHAPLEY L S. Stochastic games[J]. PNAS, 1953, 39(10): 1095–1100.
[23] LIAO W X, SALINAS S, LI M, et al. Cascading failure attacks in the power system: a stochastic game perspective[J]. IEEE Internet of Things Journal, 2017, 4(6): 2247–2259.
[24] HUANG K X, ZHOU C J, QIN Y Q, et al. A game-theoretic approach to cross-layer security decision-making in industrial cyber-physical systems[J]. IEEE Transactions on Industrial Electronics, 2020, 67(3): 2371–2379.
[25] ZHU Y H, ZHAO D B. Online minimax Q network learning for two-player zero-sum Markov games[J]. IEEE Transactions on Neural Networks and Learning Systems, 2020(99): 1–14.
[26] PAUL S, NI Z, MU C X. A learning-based solution for an adversarial repeated game in cyber-physical power systems[J]. IEEE Transactions on Neural Networks and Learning Systems, 2020, 31(11): 4512–4523.