Fabricated traps based active cyber security defense against targeted cyber-attack in electric power dispatching systems

As a “brain” to control the power grid operation, the dispatching automation system is a high-value target for cyber-attack. The targeted malware, developed by well-organized adversary with in-depth context information, could intrude into the dispatching system and initiate precise attack following the propagation pattern of Stuxnet. The likelihood of cyber-attack could not be entirely eliminated by the existing cyber security defense approaches in domestic electric power system, such as the protective systems based on network border security and trusted computing technologies. In order to prevent blackout caused by targeted malware from intruding into the mainframe of the dispatching system, an active cyber defense approach based on fabricated traps is proposed in the project to facilitate a resilient dispatching system. According to the strategy that could be utilized for cyber-attack, important transmission lines are fabricated as traps to lure the malware to attack these fabricated important elements. When the traps are attacked, the dispatching system will be switched to an alternate one to guard against cyber-attack. A simulation analysis based on IEEE 118-bus system shows that fabricated important elements are not only able to prevent the selective remote tripping attack on the real ones, but also to significantly reduce the harm of random attacks. © 2016 Automation of Electric Power Systems Press.