TY - JOUR
T1 - Attack detection for load frequency control systems using stochastic unknown input estimators
AU - Ameli, Amir
AU - Hooshyar, Ali
AU - Yazdavar, Ameen Hassan
AU - El-Saadany, Ehab F.
AU - Youssef, Amr
N1 - Funding Information:
Manuscript received September 18, 2017; revised January 8, 2018 and February 28, 2018; accepted March 25, 2018. Date of publication April 6, 2018; date of current version May 14, 2018. This work was supported by NSERC-DND under Grant 2017-00020. The associate editor coordinating the review of this manuscript and approving it for publication was Prof. Qian Wang. (Corresponding author: Amir Ameli.) A. Ameli and A. H. Yazdavar are with the Electrical and Computer Engineering Department, University of Waterloo, Waterloo, ON N2L 3G1, Canada (e-mail: [email protected]; [email protected]).
Publisher Copyright:
© 2005-2012 IEEE.
PY - 2018/10
Y1 - 2018/10
N2 - False data injection attacks (FDIAs) against the automatic generation control (AGC) system can lead to unstable or non-optimal operation of the power grid. This paper introduces a method to detect FDIAs targeting the AGC system by developing a stochastic unknown input estimator (SUIE). The SUIE estimates the states of the load-frequency control system, which contains the AGC as a control loop. An increase in the SUIE's residual function (RF) beyond a defined threshold signifies an FDIA. The SUIE can be designed such that it works independently from some or all inputs to the system's state-space model. In addition, the effect of process and measurement noise on the estimated states is minimized through an optimal gain setting technique for the SUIE. Therefore, not only does the SUIE eliminate the need for information about real-time load changes throughout the grid, it also maximizes the state estimation accuracy. The combination of these features distinguishes the proposed method from existing FDIA detection techniques for the AGC system. This paper also develops a number of attack identification SUIEs (AISUIEs) to determine which measurements are compromised by an FDIA, thus facilitating FDIA mitigation strategies. The AISUIEs model FDIAs targeting each AGC measurement by an attack input. These inputs serve as the unknown inputs of different AISUIEs, whose RFs indicate the type of attack. The designed AISUIEs also differentiate between attacks and non-attack abnormalities such as faults. Simulation analysis of a three-area power system corroborates the effectiveness of the proposed method. In addition, the performance of the proposed method is tested using an OPAL real-time simulator, and is compared with another technique from the literature.
AB - False data injection attacks (FDIAs) against the automatic generation control (AGC) system can lead to unstable or non-optimal operation of the power grid. This paper introduces a method to detect FDIAs targeting the AGC system by developing a stochastic unknown input estimator (SUIE). The SUIE estimates the states of the load-frequency control system, which contains the AGC as a control loop. An increase in the SUIE's residual function (RF) beyond a defined threshold signifies an FDIA. The SUIE can be designed such that it works independently from some or all inputs to the system's state-space model. In addition, the effect of process and measurement noise on the estimated states is minimized through an optimal gain setting technique for the SUIE. Therefore, not only does the SUIE eliminate the need for information about real-time load changes throughout the grid, it also maximizes the state estimation accuracy. The combination of these features distinguishes the proposed method from existing FDIA detection techniques for the AGC system. This paper also develops a number of attack identification SUIEs (AISUIEs) to determine which measurements are compromised by an FDIA, thus facilitating FDIA mitigation strategies. The AISUIEs model FDIAs targeting each AGC measurement by an attack input. These inputs serve as the unknown inputs of different AISUIEs, whose RFs indicate the type of attack. The designed AISUIEs also differentiate between attacks and non-attack abnormalities such as faults. Simulation analysis of a three-area power system corroborates the effectiveness of the proposed method. In addition, the performance of the proposed method is tested using an OPAL real-time simulator, and is compared with another technique from the literature.
KW - Automatic generation control (AGC)
KW - cyber-physical power system
KW - cybersecurity
KW - intrusion detection
KW - load-frequency control
UR - https://www.scopus.com/pages/publications/85045209322
U2 - 10.1109/TIFS.2018.2824253
DO - 10.1109/TIFS.2018.2824253
M3 - Article
AN - SCOPUS:85045209322
SN - 1556-6013
VL - 13
SP - 2575
EP - 2590
JO - IEEE Transactions on Information Forensics and Security
JF - IEEE Transactions on Information Forensics and Security
IS - 10
ER -