Cyber physical attack detection

Ferragut, Erik M.; Laska, Jason A.

Title: Cyber physical attack detection

Full Record
Other Related Research

Abstract

A cyber-security threat detection system and method stores physical data measurements from a cyber-physical system and extracts synchronized measurement vectors synchronized to one or more timing pulses. The system and method synthesize data integrity attacks in response to the physical data measurements and applies alternating parameterized linear and non-linear operations in response to the synthesized data integrity attacks. The synthesis renders optimized model parameters used to detect multiple cyber-attacks.

Inventors:: Ferragut, Erik M.; Laska, Jason A.

Issue Date:: 2021-02-23

Research Org.:: Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)

Sponsoring Org.:: USDOE

OSTI Identifier:: 1805539

Patent Number(s):: 10929529

Application Number:: 16/774,305

Assignee:: UT-Battelle, LLC (Oak Ridge, TN)

DOE Contract Number:: AC05-00OR22725

Resource Type:: Patent

Resource Relation:: Patent File Date: 01/28/2020

Country of Publication:: United States

Language:: English

Citation Formats


                    Ferragut, Erik M., and Laska, Jason A. Cyber physical attack detection.  United States: N. p., 2021. 
        Web.

Copy to clipboard


                    Ferragut, Erik M., & Laska, Jason A. Cyber physical attack detection.  United States.

Copy to clipboard


                    Ferragut, Erik M., and Laska, Jason A. Tue .  
        "Cyber physical attack detection".  United States.  https://www.osti.gov/servlets/purl/1805539.

Copy to clipboard


                    
@article{osti_1805539,

  title        = {Cyber physical attack detection},

  author       = {Ferragut, Erik M. and Laska, Jason A.},

  abstractNote = {A cyber-security threat detection system and method stores physical data measurements from a cyber-physical system and extracts synchronized measurement vectors synchronized to one or more timing pulses. The system and method synthesize data integrity attacks in response to the physical data measurements and applies alternating parameterized linear and non-linear operations in response to the synthesized data integrity attacks. The synthesis renders optimized model parameters used to detect multiple cyber-attacks.},

  doi          = {},

  journal      = {},
number       = ,

  volume       = ,

  place        = {United States},

  year         = {2021},

  month        = {2}

}

Copy to clipboard

Patent:

Save / Share:

Export Metadata

Save to My Library

Similar Records in DOE Patents and OSTI.GOV collections:

Cyber physical attack detection

Patent Ferragut, Erik M.; Laska, Jason A.

A cyber-security threat detection system and method stores physical data measurements from a cyber-physical system and extracts synchronized measurement vectors synchronized to one or more timing pulses. The system and method synthesizes data integrity attacks in response to the physical data measurements and applies alternating parametrized linear and non-linear operations in response to the synthesized data integrity attacks. The synthesis renders optimized model parameters used to detect multiple cyber-attacks.
Full Text Available
Systems and methods for detecting and mitigating cyber attacks on power systems comprising distributed energy resources

Patent Johnson, Jay Tillay

Extensive deployment of interoperable distributed energy resources (DER) on power systems is increasing the power system cybersecurity attack surface. National and jurisdictional interconnection standards require DER to include a range of autonomous and commanded grid-support functions which can drastically influence power quality, voltage, and the generation-load balance. Investigations of the impact to the power system in scenarios where communications and operations of DER are controlled by an adversary show that each grid-support function exposes the power system to distinct types and magnitudes of risk. The invention provides methods for minimizing the risks to distribution and transmission systems using an engineeredmore » « less
Full Text Available
Method and apparatus for detecting cyber attacks on an alternating current power grid

Patent McEachern, Alexander; Hofmann, Ronald

A method and apparatus for detecting cyber attacks on remotely-operable elements of an alternating current distribution grid. Two state estimates of the distribution grid are prepared, one of which uses micro-synchrophasors. A difference between the two state estimates indicates a possible cyber attack.
Full Text Available
Cyber-attack detection and neutralization

Patent Mestha, Lalit Keshav; Anubi, Olugbenga; Abbaszadeh, Masoud

The example embodiments are directed to a system and method for neutralizing abnormal signals in a cyber-physical system. In one example, the method includes receiving input signals comprising time series data associated with an asset and transforming the input signals into feature values in a feature space, detecting one or more abnormal feature values in the feature space based on a predetermined normalcy boundary associated with the asset, and determining an estimated true value for each abnormal feature value, and performing an inverse transform of each estimated true value to generate neutralized signals comprising time series data and outputting themore » neutralized signals. « less
Full Text Available
Cyber-attack detection, localization, and neutralization for unmanned aerial vehicles

Patent Mestha, Lalit Keshav; Anubi, Olugbenga; John, Justin Varkey

In some embodiments, an Unmanned Aerial Vehicle (“UAV”) system may be associated with a plurality of monitoring nodes, each monitoring node generating a series of monitoring node values over time that represent operation of the UAV system. An attack detection computer platform may receive the series of current monitoring node values and generate a set of current feature vectors. The attack detection computer platform may access an attack detection model having at least one decision boundary (e.g., created using a set of normal feature vectors a set of attacked feature vectors). The attack detection model may then be executed andmore » « less
Full Text Available

Similar Records