← 返回
多区域电力系统中的先天网络免疫与后天网络免疫
Innate Cyber-Immunity and Acquired Cyber-Immunity Across Multi-Area Power Systems
| 作者 | Jiazuo Hou · Yue Song · Yunhe Hou · Jimmy Chih-Hsien Peng |
| 期刊 | IEEE Transactions on Power Systems |
| 出版日期 | 2025年3月 |
| 技术分类 | 电动汽车驱动 |
| 技术标签 | GaN器件 |
| 相关度评分 | ★★★★★ 5.0 / 5.0 |
| 关键词 | 电力网络 网络免疫策略 隐蔽虚假数据注入攻击 固有网络免疫 获得性网络免疫 |
语言:
中文摘要
生物体已经进化出先天和后天免疫系统来抵御像冠状病毒这样的病原体。同样,受到网络攻击威胁的电网也需要网络免疫能力。受免疫学研究的启发,本研究针对电网中任意选定的部分(称为“电力子网”),开发了一种网络免疫策略,即刻画“先天网络免疫”并建立“后天网络免疫”,以抵御隐蔽的虚假数据注入(FDI)网络攻击。在此过程中,在没有外部保护且存在信息不对称的情况下,本文首次证实了存在对FDI网络攻击具有先天免疫能力的电力子网,并给出了其闭式条件,即便所有量测数据都被篡改。随后,本文建立了单领导者 - 多追随者的双层优化模型,以战略性地分配量测保护,从而实现后天网络免疫,并明确给出了其存在条件和最低成本。更重要的是,本文提出了一种双向网络免疫传播机制,以在相邻子网间实现防御资源的最优空间分配。该机制还明确确定了时间分配顺序,揭示了其对建立网络免疫的顺序性和累积性影响。这是通过设计递归遍历算法实现的,其中一种算法被建模为多叉树的后序深度优先搜索问题。所提出的特定子网网络免疫策略在改进后的澳大利亚国家电力市场中得到了验证。
English Abstract
Organisms have evolved innate and acquired immune systems to defend against pathogens like coronaviruses. Similarly, power networks, threatened by cyber-attacks, desire cyber-immunity. Inspired by the immunology research, this study develops a cyber-immune strategy—characterizing innate cyber-immunity and establishing acquired cyber-immunity—for any selected portion of a power network (termed as power subnetwork) against stealthy false data injection (FDI) cyber-attacks. Therein, without extrinsic protection and information asymmetry, this paper for the first time confirms the existence and provides closed-form conditions for power subnetworks that are innately immune to FDI cyber-attacks despite all measurements being compromised. Single-leader-multi-follower bi-level optimization models are then developed to strategically allocate measurement protection, leading to the acquired cyber-immunity, whose conditions for existence and the least cost are explicitly formulated. More importantly, a bi-directional cyber-immunity propagation mechanism is presented to provide the optimal spatial allocation of defense resources across adjacent subnetworks. It also explicitly determines the temporal allocation sequence, revealing its sequential and cumulative impacts on establishing cyber-immunity. This is achieved by designing recursive traversal algorithms, one of which is modelled as a post-order depth-first-search problem of a multi-fork tree. The proposed subnetwork-specific cyber-immune strategy is verified in a modified Australian National Electricity Market.
S
SunView 深度解读
该网络免疫框架对阳光电源分布式能源系统具有重要防护价值。在PowerTitan大型储能系统中,可借鉴先天免疫机制设计硬件级安全隔离与冗余通信链路,通过后天免疫实现攻击模式学习与自适应防御策略。对于iSolarCloud云平台管理的多站点光伏电站,分层免疫架构可实现区域级威胁隔离与协同响应。在充电桩网络中,该框架可防范针对CAN总线和充电协议的网络攻击,通过动态信息更新机制快速识别异常充电行为。建议在ST储能变流器的通信模块中集成轻量级入侵检测算法,结合边缘计算实现毫秒级威胁响应,提升新能源系统在电网侧的安全韧性与自愈能力。