A Randomization-Based, Zero-Trust Cyberattack Detection Method for Hierarchical Systems
This paper demonstrates a novel randomization-based approach for verifying power system control signals with application to detecting cyberattacks. We consider fully connected hierarchical systems containing multiple local agents and a global "trust" agent. The global agent uses a time-varying randomized assignment scheme to identify corrupt network links based on principles of zero trust and majority rule. To evaluate the performance of this detection approach, we implement our algorithm in MATLAB and run it against nearly 43 million unique attack scenarios spanning a range of system sizes. For each scenario, the algorithm determines whether the identified corruptions satisfy a set of validity constraints reflecting network topology and uses that result to say whether the recovered state value for one or more local agents is malicious. We compare the algorithm's determination to the true state of the system to assess performance and find that classification accuracy converges to 100% as system size increases, suggesting that the validity constraints become more difficult to satisfy for larger systems. We further explore the scenarios that evade detection to understand practical implications for employing this detection approach.
- Research Organization:
- National Renewable Energy Laboratory (NREL), Golden, CO (United States)
- Sponsoring Organization:
- USDOE National Renewable Energy Laboratory (NREL), Laboratory Directed Research and Development (LDRD) Program
- DOE Contract Number:
- AC36-08GO28308
- OSTI ID:
- 2221826
- Report Number(s):
- NREL/CP-5R00-86335; MainId:87108; UUID:9676e663-0582-4ab3-ab22-faa6067e7167; MainAdminID:70124
- Resource Relation:
- Conference: Presented at the 2023 IEEE Secure Development Conference (SecDev), 18-20 October 2023, Atlanta, Georgia
- Country of Publication:
- United States
- Language:
- English
Similar Records
A Hierarchical Multi-Agent Based Anomaly Detection for Wide-Area Protection in Smart Grid
DualTrust: A Distributed Trust Model for Swarm-Based Autonomic Computing Systems