基于贝叶斯序贯博弈模型的智能电网信息物理安全分析

智能电网是利用信息技术优化从供应者到消费者的电力传输和配电网络.作为一种信息物理系统（Cyber-physical system，CPS），智能电网由物理设备和负责数据计算与通信的网络组成.智能电网的诸多安全问题会出现在通信网络和物理设备这两个层面，例如注入坏数据和收集客户隐私信息的网络攻击，攻击电网物理设备的物理攻击等.本文主要研究了智能电网的系统管理员（防护者）如何确定攻击者类型，从而选择最优防护策略的问题.提出了一种贝叶斯序贯博弈模型以确定攻击者的类型，根据序贯博弈树得到博弈双方的均衡策略.首先，对类型不确定的攻击者和防护者构建静态贝叶斯博弈模型，通过海萨尼转换将不完全信息博弈转换成完全信息博弈，得到贝叶斯纳什均衡解，进而确定攻击者的类型.其次，考虑攻击者和防护者之间的序贯博弈模型，它能够有效地帮助防护者进行决策分析.通过逆向归纳法分别对两种类型的攻击者和防护者之间的博弈树进行分析，得到博弈树的均衡路径，进而得到攻击者的最优攻击策略和防护者的最优防护策略.分析表明，贝叶斯序贯博弈模型能够使防护者确定攻击者的类型，并且选择最优防护策略，从而为涉及智能电网信息安全的相关研究提供参考.     

基于局部离群点检测算法的电力通信网络拥塞安全控制方法

针对电网运行数据堵塞程度较高,传输安全性较差的问题,提出了基于局部离群点检测算法的电力通信网络拥塞安全控制方法。通过电力通信网络的通道模型与路由监测协定,凭借波特间隔均衡法优化节点布局,结合自适应偏差补充调整反馈,均衡通道。针对储存空间、带宽容量、CPU处置功能等主要拥塞因素,分析数据密度估计值,并在带宽函数中加入邻域平均距离得到局部密度,推导出数据的局部离群点,通过调节离群点大小断定和控制电力通信网络。实验证明,所提方法能够精准检测出电力通信网络是否拥塞,及时调节通信数据,降低堵塞程度,保证信息可以安全传输。     

The role of communication systems in smart grids: Architectures,technical solutions and research challenges

The purpose of this survey is to present a critical overview of smart grid concepts, with a special focus on the role that communication, networking and middleware technologies will have in the transformation of existing electric power systems into smart grids. First of all we elaborate on the key technological, economical and societal drivers for the development of smart grids. By adopting a data-centric perspective we present a conceptual model of communication systems for smart grids, and we identify functional components, technologies, network topologies and communication services that are needed to support smart grid communications. Then, we introduce the fundamental research challenges in this field including communication reliability and timeliness, QoS support, data management services, and autonomic behaviors. Finally, we discuss the main solutions proposed in the literature for each of them, and we identify possible future research directions.     

Energy efficient and robust allocation of interdependent tasks on mobile ad hoc computational grid

A mobile ad hoc computational grid is a distributed computing infrastructure that allows mobile nodes to share computing resources in a mobile ad hoc environment. Compared to traditional distributed systems such as grids and clouds, resource allocation in mobile ad hoc computational grids is not straightforward because of node mobility, limited battery power and an infrastructure‐less network environment. The existing schemes are either based on a decentralized architecture that results in poor allocation decisions or assume independent tasks. This paper presents a scheme that allocates interdependent tasks and aims to reduce task completion time and the amount of energy consumed in transmission of data. This scheme comprises two key algorithms: resource selection and resource allocation. The resource selection algorithm is designed to select nodes that remain connected for a longer period, whereas the resource assignment or allocation algorithm is developed to allocate interdependent tasks to the nodes that are accessible at the minimum transmission power. The scheme is based on a hybrid architecture that results in effective allocation decisions, reduces the communication cost associated with the exchange of control information, and distributes the processing burden among the nodes. The paper also investigates the relationship between the data transfer time and transmission energy consumption and presents a power‐based routing protocol to reduce data transfer costs and transmission energy consumption. Copyright © 2014 John Wiley & Sons, Ltd.     

Smart grid data access control scheme based on blockchain

The smart grid communication parties need to process the data by the trusted central node, which will lead to security issues such as single-point attacks and data tampering. This paper proposes a smart grid data access control scheme based on blockchain, the user completes the registration of the smart meter by three encryptions. After the registration is completed, the registration information will be uploaded to the blockchain. In the data access phase, the verification center verifies the user's data access request, the database will accept the user's request for data if the verification is passed, and that will be broadcasted on the entire network and uploaded to the blockchain. The security of the scheme is analyzed by using a random oracle model. Analysis shows that this scheme can resist public key replacement attacks and malicious key generation center (KGC) attacks. Compared with the existing scheme, this scheme can more effectively resist more types of attacks. It shows that the smart grid data access control scheme proposed in this paper is safe, reliable and efficient.     

无线传感器网络RCF-MAC协议研究

射频充电（ RFC）技术是一种通过基站发射射频电波为传感器节点补充电量的新兴技术。但在RFC无线传感器网络中,多基站同时发射能量时产生的能量干涉衰减现象会明显降低充电效率,此外,能量传输与数据通信共享信道会降低整个网络的吞吐量。针对上述问题,提出了RFC—MAC协议,为提高充电效率,将请求充电传感器节点周围的基站按距离分为两组,两组基站分时能量传输,以避免能量干涉衰减现象;传感器网络中设双信道,分别用于能量传输与数据通信,以提高网络的吞吐量。仿真结果表明：RFC—MAC协议显著提高了传感器节点的充电效率和平均网络吞吐量。     

Community detection in national-scale high voltage transmission networks using genetic algorithms

The large-scale interconnection of electricity networks has been one of the most important investments made by electric companies, and this trend is expected to continue in the future. One of the research topics in this field is the application of graph-based analysis to identify the characteristics of power grids. In particular, the application of community detection techniques allows for the identification of network elements that share valuable properties by partitioning a network into some loosely coupled sub-networks (communities) of similar scale, such that nodes within a community are densely linked, while connections between different communities are sparser. This paper proposes the use of competitive genetic algorithms to rapidly detect any number of community structures in complex grid networks. Results obtained in several national- scale high voltage transmission networks, including Italy, Germany, France, the Iberian peninsula (Spain and Portugal), Texas (US), and the IEEE 118 bus test case that represents a portion of the American Electric Power System (in the Midwestern US), show the good performance of genetic algorithms to detect communities in power grids. In addition to the topological analysis of power grids, the implications of these results from an engineering point of view are discussed, as well as how they could be used to analyze the vulnerability risk of power grids to avoid large-scale cascade failures.     

Analyzing sharing strategies for finite buffer memory in a router among outgoing channels

We propose a model for a transit node in a data transmission network that distributes the incoming flow over several outgoing directions. We study the influence of the quality of communication channels, distribution of the shares of incoming traffic over outgoing directions, and strategies for dividing a limited buffer memory in the transit node among queues to outgoing communication channels on the throughput of the network fragment with incoming and outgoing interfaces of varying performance.     

Malware propagation in smart grid networks: metrics,simulation and comparison of three malware types

Journal of Computer Virology and Hacking Techniques - Smart grids utilize communication technologies that make them vulnerable to cyber attacks. The power grid is a critical infrastructure that...     

一种无线传感网的Sink节点移动路径规划算法研究

为寻找传感节点均匀分布时Sink节点的最优移动路径和最大网络生存时间,提出一种无线传感网的Sink节点移动路径规划算法(MPOA).在MPOA算法中,将Sink节点的数据收集范围分解成多个圆环,将监测区域分解成多个网格.根据Sink节点的停留位置和多跳通信方式,采用数学公式表示每一个网格的单位节点能耗,从而获得Sink节点移动的网络生存时间优化模型.采用修正的混合粒子群算法求解该优化模型,获得网络生存时间、Sink节点的停留位置和移动路径的最优方案.仿真结果表明:MPOA算法可寻找到Sink节点的最优移动路径,从而平衡网络能耗,提高网络生存时间.在一定的条件下,MPOA算法比Circle,Rect和Rand算法更优.     

A new efficient error control algorithm for wireless sensor networks in smart grid

Error detection and correction is an important issue in the design and maintenance of a smart grid communication network to provide reliable communication between sender and receiver. Various error-control coding techniques are employed to reduce bit error rates (BER) in wireless sensor networks (WSNs). The performance of these techniques is also compared and evaluated to find the most suitable technique for WSNs. This is the first study to compare the most efficient coding techniques in the smart grid environment, and it suggests a new error correction algorithm based on this comparison result. Therefore, this article first examines and compares two forward error control (FEC) coding techniques such as Bose-Chaudhuri-Hochquenghem code (BCH) and Reed Solomon code (RS) with various modulation methods including frequency shift keying (FSK), offset quadrature phase-shift keying (OQPSK), and differential phase shift keying (DPSK) in a 500 kV line-of-sight (LoS) substation smart grid environment. Second, as a result of this comparison, a new adaptive error control (AEC) algorithm is proposed. Adaptive error control adaptively changes error correction code (ECC) based on the channel behavior that is observed through the packet error rate (PER) in the recent previous transmissions. The link-quality-aware capacitated minimum hop spanning tree (LQ-CMST) algorithm and the multi-channel scheduling algorithm are used for data transmission over the log-normal channel. Therefore, the performance of compared coding techniques and AEC are also evaluated when multiple channels are used during transmission. Further, AEC is compared with static RS and without-FEC methods based on performance metrics such as the throughput, BER, and delay in different smart grid environments, e.g., 500 kV Substation (LoS), underground network transformer vaults (UTV) (LoS), and main power control room (MPR) (LoS). Our simulation results indicate that the proposed AEC algorithm achieves better performances than all those techniques.     

受成本约束的电力信息?物理相依系统鲁棒性优化设计

针对复杂网络视角,考虑到电力网络存在扩建等现实问题,研究受成本约束下如何增设站点从而优化负荷分布、改善系统的鲁棒性。基于华中地区某省电力网的拓扑结构数据,构建了电力网与信息网部分一一对应的相依网络模型,并采用非线性负载?容量模型作为系统的级联失效模型。考虑实际电力网中超前规划新增厂站的现实情况,提出4种可能的增设电力节点及其信息设备对应的节点配置优化策略,并对华中某省电力网及IEEE 118 总线的电力信息?物理系统在4种节点配置策略下的电力负荷优化及系统鲁棒性进行仿真及分析。仿真结果表明:以配置的物理节点连接网络中大电力负荷及小电力负荷节点为基准时,仅需配置较少的节点就能达到既定的优化度。本结论对于电力系统在建设与规划过程中将有限资源进行较优分配具有一定的指导意义。     

A survey on cyber attacks against nonlinear state estimation in power systems of ubiquitous cities

It is well-known that critical infrastructures would be targets for cyber attacks. In this paper, we focus on the power systems (i.e. smart grids) in ubiquitous cities, where every meter is linked to an information network through wireless networking. In a smart grid system, information from smart meters would be used to perform a state estimation in real time to maintain the stability of the system. A wrong estimation may lead to disastrous consequences (e.g. suspension of electricity supply or a big financial loss). Unfortunately, quite a number of recent results showed that attacks on this estimation process are feasible by manipulating readings of only a few meters. In this paper, we focus on nonlinear state estimation which is a more realistic model and widely employed in a real power grid environment. We category cyber attacks against nonlinear state estimation, and review the mechanisms behind. State-of-the-art security measures to detect these attacks are discussed via sensor protection. Hope that the community would be able to come up with a secure system architecture for ubiquitous cities.     

基于软件定义网络的反嗅探攻击方法

网络嗅探攻击中,攻击者从网络节点或链路捕获和分析网络通信数据、监视网络状态、窃取用户名和密码等敏感信息。在攻击发生时,攻击者通常处于静默状态,传统的网络防护手段如防火墙、入侵检测系统（IDS）或入侵防御系统（IPS）很难发现并有效抵御攻击。从网络结构入手,提出基于软件定义网络（SDN）的动态路径跳变（DPH）通信机制,依据空间和时间约束条件,动态改变通信节点之间的路径,宏观上将通信流量相对均匀地分布在多条传输链路中,增加网络嗅探攻击中获取完整数据的难度。实验仿真结果说明,在一定的网络规模下,动态路径跳变能够在不明显降低网络传输性能的条件下有效防御嗅探攻击。     

基于复杂网络理论的大电网脆弱性研究综述

电网脆弱性是大电网安全研究的核心内容之一.在国内外电网大停电事故不断频发的背景下,传统方法难以有效地从宏观上系统地分析大规模连锁故障的产生和传播过程.随着复杂网络理论研究的不断发展和普遍应用,这种方法突破了传统方法分析连锁故障的局限性,为研究大电网脆弱性提供了新的视角和方向.对此,首先介绍复杂网络的两个基本模型及其常见...     

应用于天然气管网安全监测的无线传感器网络节点设计与实现

利用无线传感器网络技术可对城市天然气管网安全进行在线、实时监测.结合具体应用需求和特点,设计了一种支持IEEE802.15.4和ZigBee协议的新型无线传感器网络节点.利用该节点,可以识别施工或其它外力对天然气管道的撞击破坏,检测管道附近泄漏的天然气浓度及异常温度等不安全因素.在集成微处理器和射频收发模块的"片上系统"芯片的基础上,实现了射频通信、数据采集和电源等模块的硬件电路设计,给出了节点间组网及数据传输的软件机制.实验结果表明,该节点具有功耗低、通信可靠等特点,可满足天然气管道安全监测的实际需要.     

Cyber Attack Protection and Control of Microgrids

Recently, the smart grid has been considered as a next-generation power system to modernize the traditional grid to improve its security, connectivity, efficiency and sustainability. Unfortunately, the smart grid is susceptible to malicious cyber attacks, which can create serious technical, economical, social and control problems in power network operations. In contrast to the traditional cyber attack minimization techniques, this paper proposes a recursive systematic convolutional (RSC) code and Kalman filter (KF) based method in the context of smart grids. Specifically, the proposed RSC code is used to add redundancy in the microgrid states, and the log maximum a-posterior is used to recover the state information, which is affected by random noises and cyber attacks. Once the estimated states are obtained by KF algorithm, a semidefinite programming based optimal feedback controller is proposed to regulate the system states, so that the power system can operate properly. Test results show that the proposed approach can accurately mitigate the cyber attacks and properly estimate and control the system states.      

移动自组织网络中内部丢包的检测模型

无线移动自组织网络中数据的传输是基于中间节点的合作转发的,但由于内部自私节点为了节省带宽和电量或者网络受到恶意节点的攻击,导致丢包行为发生,网络性能严重降低。基于无线自组织网络常用的路由协议AODV,提出了一种新的针对内部丢包攻击的检测模型。该检测模型引入旁信道概念,旁信道节点和看门狗共同检测并记录节点转发报文行为,采用邻居信息表存放检测结果,当相应节点的记录值达到一定下限时就被隔离出网络。由于旁信道可以发送警报报文,该模型能够同时检测到自私节点或合作攻击节点引起的内部丢包攻击。     

无线传感器网络多信道MAC协议研究

信道接入协议是无线传感器网络的研究重点之一,对网络的性能起着决定性的作用。采用一种基于随机访问模式的多信道接入的无线传感器网络MAC协议,将信道分为一个控制频道和N组数据频道。在控制频道上,参考图论的点着色原理给节点分配数据频道;在数据信道上,动态调整节点发射功率,并利用载波侦听芯片适时唤醒节点收发数据。实验表明,这种多信道、低功耗的MAC协议可以显著降低节点功耗,增加频率的空间复用度。     

基于联盟区块链的智能电网数据安全存储与共享系统

智能电网为了实现电网可靠、安全、高效地运行,需要广泛部署无线传感网络（WSN）监控电网状态,并及时对电网异常情况进行处理。在现有的智能电网中,WSN的感知数据需要上传到可信的中心节点进行存储与共享,但是这种中心化的存储方式容易引起中心节点遭受恶意攻击而发生单点失效、数据被故意篡改等信息安全问题。针对这些信息安全问题,利用新兴的联盟区块链技术在智能电网中选定若干数据采集基站,组成智能电网数据存储联盟链（DSCB）系统。DSCB中节点间数据共享通过智能合约的方式来完成,数据拥有者设定数据共享的约束条件,使用计算机语言代替法律条款来规范数据访问者行为,从而实现以去中心化的方式集体维护一个安全可靠的数据存储数据库。安全分析表明所提数据存储联盟链系统能实现安全、有效的数据存储与共享。