Smart PV Inverter Cyberattack Detection Using Hardware-in-the-Loop Test Facility
Open Access
- 23 August 2023
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Access
- Vol. 11, 90766-90779
Abstract
This paper evaluates residential smart photovoltaic (PV) inverters’ responses to cyberattacks and assesses the performance of an intrusion detection strategy for smart grid devices by comparing time-series power flow results from a simulation application called Faster Than Real-Time (FTRT) Simulator to measurements from a Power Hardware-in-the-Loop (P-HIL) laboratory as a testbed. Twenty different cyberattacks from three classes - Denial of Service (DoS), Intermittent attack, and Modification - were designed and tested with grid-tied smart inverters in order to study the inverters’ responses to malicious activities. The intrusion detection strategy was developed using a comparison between the predicted PV power output from FTRT and the power flows measured from P-HIL laboratory through the API interface. Real and reactive power thresholds were assigned based on a number of repeated experiments to ensure the applicability of the thresholds. The results showed that inverters from different manufacturers have their own unique responses which could be detected by the power flow measurements. Our detection method could identify over 94% of actual malicious actions and 7.4% of no-attack hours are detected as false positives. Out of 38 under-attack hours, 2 undetected hours are due to the intermittent attacks. Different attacks can be detected based on the targeted components of the complex power that attackers are aiming to cause disturbances. Our findings additionally show that DoS can be noticed immediately after the devices have been sabotaged, and they can be detected from the active power analysis. However, modification attack detection will depend more on the reactive power measurements, while intermittent attacks remain the most challenging for the proposed detection method since the objective of intermittent attacks is to create an oscillation of the complex power components which need a relatively high time resolution for the measurement.Keywords
Funding Information
- U.S. Department of Energy (DE-0008768)
- University of Delaware Graduate College through the University Dissertation Fellowship
This publication has 35 references indexed in Scilit:
- Voltage Stability in a Grid-Connected Inverter With Automatic Volt-Watt and Volt-VAR FunctionsIEEE Transactions on Smart Grid, 2017
- Centralized Volt–Var Optimization Strategy Considering Malicious Attack on Distributed Energy Resources ControlIEEE Transactions on Sustainable Energy, 2017
- Attacking the smart grid using public information2016
- Characteristics and Design of Power Hardware-in-the-Loop Simulations for Electrical Power SystemsIEEE Transactions on Industrial Electronics, 2015
- Power hardware-in-the-loop simulation (PHILS) of photovoltaic power generation using real-time simulation techniques and power interfacesJournal of Power Sources, 2015
- Impact of Distributed Denial-of-Service Attack on Advanced Metering InfrastructureWireless Personal Communications, 2015
- Detection of Faults and Attacks Including False Data Injection Attack in Smart Grid Using Kalman FilterIEEE Transactions on Control of Network Systems, 2014
- Model-Based Attack Detection and Mitigation for Automatic Generation ControlIEEE Transactions on Smart Grid, 2014
- Denial-of-Service (dos) attacks on load frequency control in smart grids2013
- Distribution engineering tool features a flexible frameworkIEEE Computer Applications in Power, 1995