在电网承压条件下分离网络攻击特征
Isolating Signatures of Cyberattacks under Stressed Grid Conditions
AI总结：
针对电网承压时攻击难辨的问题，提出基于 Koopman 模式分解的在线识别与可视化框架，并在 IEEE 68-bus 系统验证。
摘要：
在诸如电网之类的受控信息物理网络中，传感器测量数据中的任何恶意数据注入都可能因闭环控制器的动作而造成广泛影响。尽管快速识别攻击特征对于可靠运行至关重要，但在节点紧密耦合的大型动态网络中做到这一点颇具挑战。一个尤其困难的场景出现在网络攻击被策略性地发动于由非恶意物理扰动引起的电网承压状态期间。在本工作中，我们提出一种基于 Koopman 模式（KM）分解的算法框架，用于在线识别和可视化来自电力网络的流式时间序列测量中的网络攻击特征。KM 能够捕捉传感器测量中自然振荡模式与异常振荡模式的空间嵌入，从而即使在已有非恶意电网承压事件的情况下，也能揭示网络攻击的具体影响。最重要的是，它使我们能够定量比较由攻击者注入的不同潜在网络攻击的结果。所提算法框架的性能通过合成攻击场景在 IEEE 68-bus 测试系统上得到说明。关于检测各类网络攻击的此类知识将使我们能够在考虑不同攻击所产生的各种约束的同时，设计适当的诊断方案。
英文摘要：
In a controlled cyber-physical network, such as a power grid, any malicious data injection in the sensor measurements can lead to widespread impact due to the actions of the closed-loop controllers. While fast identification of the attack signatures is imperative for reliable operations, it is challenging to do so in a large dynamical network with tightly coupled nodes. A particularly challenging scenario arises when the cyberattacks are strategically launched during a grid stress condition, caused by non-malicious physical disturbances. In this work, we propose an algorithmic framework -- based on Koopman mode (KM) decomposition -- for online identification and visualization of the cyberattack signatures in streaming time-series measurements from a power network. The KMs are capable of capturing the spatial embedding of both natural and anomalous modes of oscillations in the sensor measurements and thus revealing the specific influences of cyberattacks, even under existing non-malicious grid stress events. Most importantly, it enables us to quantitatively compare the outcomes of different potential cyberattacks injected by an attacker. The performance of the proposed algorithmic framework is illustrated on the IEEE 68-bus test system using synthetic attack scenarios. Such knowledge regarding the detection of various cyberattacks will enable us to devise appropriate diagnostic scheme while considering varied constraints arising from different attacks.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
