Data Mining-Based Cyber-Physical Attack Detection Tool for Attack-Resilient Adaptive Protective Relays

Abstract

Maintaining proper operation of adaptive protection schemes is one of the main challenges that must be considered for smart grid deployment. The use of reliable cyber detection and protection systems boosts the preparedness potential of the network as required by National Infrastructure Protection Plans (NIPPS). In an effort to enhance grid cyber-physical resilience, this paper proposes a tool to enable attack detection in protective relays to tackle the problem of compromising their online settings by cyber attackers. Implementing the tool first involves an offline phase in which Monte Carlo simulation is used to generate a training dataset. Using rough set classification, a set of If-Then rules is obtained for each relay and loaded to the relays at the initialization stage. The second phase occurs during online operation, with each updated setting checked by the corresponding relay’s built-in tool to determine whether the settings received are genuine or compromised. A test dataset was generated to assess tool performance using the modified IEEE 34-bus test feeder. Several assessment measures have been used for performance evaluation and their results demonstrate the tool’s superior ability to classify settings efficiently using physical properties only.

Enhancing resilience of advanced power protection systems in smart grids against cyber–physical threats

“…Table 2 provides a comprehensive overview of the limitations that are associated with the adaptive protection schemes in microgrids, along with the limited research proposed in the existing literature for investigating the cyber-physical threats. Rahman et al [28] and Mohamed and Salama [35] introduced two tools to identify cyber threats on the power protection system. However, the paper did not address the impact of cyber threats on different adaptive OCR with and without communication needs.…”

“…The time transfer demands of these information exchanges are determined by their importance to the operation of the substation and protection system. Furthermore, Table 3 presents the main message categories found for protection systems in substation, along by the performance standards specified in IEC 61850-5 [39,40]. The substation is structured into different message types, as described in IEC 61850-5, each with predetermined maximum time required for a transfer process.…”

“…Rahman et al. [28] and Mohamed and Salama [35] introduced two tools to identify cyber threats on the power protection system. However, the paper did not address the impact of cyber threats on different adaptive OCR with and without communication needs.…”

A novel cyber‐attack modelling and detection in overcurrent protection relays based on wavelet signature analysis

“…Applying large number of logical operators in algorithm and multiple telecommunication routes is the main drawback of proposed method. In [40], false data injection attack in overcurrent relay settings is detected. Monte Carlo simulation is done to train data sets and load conditional commands using the rough classification method.…”

Research on the organization of public space relations in commercial complex buildings in the context of big data

“…Based on the characteristics of big data, a reasonable access method needs to be designed to access the huge amount of ponderous data. Thus, the hit rate of data access in the distributed memory cache layer can be improved as much as possible so that the advantages of in-memory data storage in terms of read and write access performance can be exploited [30]- [33].…”