论文标题
考虑移动目标防御的虚假数据注射攻击的网络物理风险评估
Cyber-Physical Risk Assessment for False Data Injection Attacks Considering Moving Target Defences
论文作者
论文摘要
在本文中,我们研究了影响虚假数据注入(FDI)攻击成功的因素。许多作品在仅在静态系统中更改测量值的背景下考虑了外国直接投资攻击。但是,成功的攻击将首先入侵系统,然后构建可以绕过不良数据检测(BDD)的攻击向量。通过这种方式,我们为外国直接投资风险评估开发了完整的服务框架。该框架通过加权图评估以及基于物理的,基于线重的漏洞评估来考虑系统入侵的成本。我们在IEEE 14总线系统上介绍了我们的模拟,该系统具有覆盖的RTU网络,以模拟真正的入侵风险。网络模型考虑了FDI攻击的多种进入方法,包括仪表入侵,RTU入侵和样式攻击。入境后我们的物理增强模型分析了所需的拓扑差异水平,以防止优化的攻击载体中分支过载。
In this paper, we examine the factors that influence the success of false data injection (FDI) attacks in the context of both cyber and physical styles of reinforcement. Many works consider the FDI attack in the context of the ability to change a measurement in a static system only. However, successful attacks will require first intrusion into a system followed by construction of an attack vector that can bypass bad data detection (BDD). In this way, we develop a full service framework for FDI risk assessment. The framework considers both the costs of system intrusion via a weighted graph assessment in combination with a physical, line overload-based vulnerability assessment. We present our simulations on a IEEE 14-bus system with an overlain RTU network to model the true risk of intrusion. The cyber model considers multiple methods of entry for the FDI attack including meter intrusion, RTU intrusion and combined style attacks. Post-intrusion our physical reinforcement model analyses the required level of topology divergence to protect against a branch overload from an optimised attack vector.