Towards Real-Time Distinction of Power System Faults and Cyber Attacks

A. Abedi; Vetrivel Subramaniam Rajkumar; Alexandru Stefanov; P. Palensky

doi:10.1109/PESGM52003.2023.10253241

Towards Real-Time Distinction of Power System Faults and Cyber Attacks

A. Abedi, Vetrivel Subramaniam Rajkumar, Alexandru Stefanov, P. Palensky

Research output: Chapter in Book/Conference proceedings/Edited volume › Conference contribution › Scientific › peer-review

56 Downloads (Pure)

Abstract

This paper presents a methodology to distinguish between three-phase faults and GOOSE cyber attacks, aimed at opening the circuit breakers in the power grid. We propose a scheme that utilizes Phasor Measurement Unit (PMU)-enabled monitoring of power grid states, and communication network packet logs in the substation. In this scheme, by leveraging both cyber and physical data correlations and applying a Seasonal Autoregressive Moving Average (SARMA) model, we successfully distinguish between 3-phase faults and cyber attacks. The proposed scheme is tested using the benchmark IEEE 9-bus system, and can distinguish cyber attacks from faults in less than 0.2s. This demonstrates the usefulness of the proposed scheme for power system cyber security analytics.

Original language	English
Title of host publication	2023 IEEE Power and Energy Society General Meeting, PESGM 2023
Place of Publication	Orlando, FL, USA
Publisher	IEEE
Number of pages	5
ISBN (Electronic)	978-1-6654-6441-3
DOIs	https://doi.org/10.1109/PESGM52003.2023.10253241
Publication status	Published - 2023

Publication series

Name	IEEE Power and Energy Society General Meeting
Volume	2023-July
ISSN (Print)	1944-9925
ISSN (Electronic)	1944-9933

Bibliographical note

Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care
Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.

Access to Document

10.1109/PESGM52003.2023.10253241

Towards_Real-Time_Distinction_of_Power_System_Faults_and_Cyber_AttacksFinal published version, 946 KB

Cite this

@inproceedings{99863cbdfb5b461bb0ad779242fb70c5,

title = "Towards Real-Time Distinction of Power System Faults and Cyber Attacks",

abstract = "This paper presents a methodology to distinguish between three-phase faults and GOOSE cyber attacks, aimed at opening the circuit breakers in the power grid. We propose a scheme that utilizes Phasor Measurement Unit (PMU)-enabled monitoring of power grid states, and communication network packet logs in the substation. In this scheme, by leveraging both cyber and physical data correlations and applying a Seasonal Autoregressive Moving Average (SARMA) model, we successfully distinguish between 3-phase faults and cyber attacks. The proposed scheme is tested using the benchmark IEEE 9-bus system, and can distinguish cyber attacks from faults in less than 0.2s. This demonstrates the usefulness of the proposed scheme for power system cyber security analytics.",

author = "A. Abedi and {Subramaniam Rajkumar}, Vetrivel and Alexandru Stefanov and P. Palensky",

note = "Green Open Access added to TU Delft Institutional Repository {\textquoteleft}You share, we take care!{\textquoteright} – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public. ",

year = "2023",

doi = "10.1109/PESGM52003.2023.10253241",

language = "English",

series = "IEEE Power and Energy Society General Meeting",

publisher = "IEEE",

booktitle = "2023 IEEE Power and Energy Society General Meeting, PESGM 2023",

address = "United States",

}

Towards Real-Time Distinction of Power System Faults and Cyber Attacks. / Abedi, A.; Subramaniam Rajkumar, Vetrivel ; Stefanov, Alexandru et al.
2023 IEEE Power and Energy Society General Meeting, PESGM 2023. Orlando, FL, USA: IEEE, 2023. (IEEE Power and Energy Society General Meeting; Vol. 2023-July).

Research output: Chapter in Book/Conference proceedings/Edited volume › Conference contribution › Scientific › peer-review

TY - GEN

T1 - Towards Real-Time Distinction of Power System Faults and Cyber Attacks

AU - Abedi, A.

AU - Subramaniam Rajkumar, Vetrivel

AU - Stefanov, Alexandru

AU - Palensky, P.

N1 - Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.

PY - 2023

Y1 - 2023

N2 - This paper presents a methodology to distinguish between three-phase faults and GOOSE cyber attacks, aimed at opening the circuit breakers in the power grid. We propose a scheme that utilizes Phasor Measurement Unit (PMU)-enabled monitoring of power grid states, and communication network packet logs in the substation. In this scheme, by leveraging both cyber and physical data correlations and applying a Seasonal Autoregressive Moving Average (SARMA) model, we successfully distinguish between 3-phase faults and cyber attacks. The proposed scheme is tested using the benchmark IEEE 9-bus system, and can distinguish cyber attacks from faults in less than 0.2s. This demonstrates the usefulness of the proposed scheme for power system cyber security analytics.

AB - This paper presents a methodology to distinguish between three-phase faults and GOOSE cyber attacks, aimed at opening the circuit breakers in the power grid. We propose a scheme that utilizes Phasor Measurement Unit (PMU)-enabled monitoring of power grid states, and communication network packet logs in the substation. In this scheme, by leveraging both cyber and physical data correlations and applying a Seasonal Autoregressive Moving Average (SARMA) model, we successfully distinguish between 3-phase faults and cyber attacks. The proposed scheme is tested using the benchmark IEEE 9-bus system, and can distinguish cyber attacks from faults in less than 0.2s. This demonstrates the usefulness of the proposed scheme for power system cyber security analytics.

UR - http://www.scopus.com/inward/record.url?scp=85174683309&partnerID=8YFLogxK

U2 - 10.1109/PESGM52003.2023.10253241

DO - 10.1109/PESGM52003.2023.10253241

M3 - Conference contribution

T3 - IEEE Power and Energy Society General Meeting

BT - 2023 IEEE Power and Energy Society General Meeting, PESGM 2023

PB - IEEE

CY - Orlando, FL, USA

ER -

Towards Real-Time Distinction of Power System Faults and Cyber Attacks

Abstract

Publication series

Bibliographical note

Access to Document

Other files and links

Fingerprint

Cite this