Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Coordinated Thermal Safety Attack and Defense on EV Battery Management Systems

Battery temperature sensor and battery current sensor data which are key sensing inputs to the Battery Management Controllers in electric vehicles, are vulnerable to possible cyber/ physical manipulation due to known vulnerabilities inherited from CAN bus technology that is used for in-vehicle communications between electronic control units that transfer sensing and control data. In this paper, we first create a simulation that enables us to evaluate impact of cyber physical attacks on electric vehicle battery management system in a controlled environment that violates thermal safety. Specifically, we emulate a Level 3 - DC fast charging system with SAE J1772/CCS, integrated with standard charging controls and thermal safety controls on EVs, and various sensing data flows. Second, we propose a coordinated current and battery temperature attack that has crippling economic, and safety impacts. Third, we quantify the usability, economic and safety impacts of such attacks as a function of the extent of data manipulation. Finally, we propose a physics model driven detection technique to detect presence of such attacks.

25 ENERGY STORAGE↗
DOE OSTI2025

Real-Time Testbed for Studying Cyberattacks and Defense in DER-integrated Smart Inverter Systems

In this paper, we propose a Hardware-in-the-Loop (HIL) simulation testbed suitable for the implementation and testing of realistic cyberattacks on grid-tied smart inverter systems integrated with Distributed Energy Resources (DER) that use the Distributed Network Protocol-3 (DNP3) protocol for communications between grid components. Specifically, our testbed combines a Real-Time Digital Simulator (RTDS) NovaCor device, outfitted with GNETx2 network interface cards, a gridtied DER topology implemented via the RTDS software package RSCAD, and a custom virtual network that emulates a man in the middle attacker. The Man-in-the-Middle (MITM) attacker captures DNP3 traffic and falsifies telemetry data in DNP3 packets to trigger unwarranted commands from a DNP3 controller that exploit smart inverter grid support functions. We choose DNP3 and implement grid support functions according to the IEEE Std. 1547-2018 mandated for the interconnection and interoperability of DER power systems with associated power components. Furthermore, we develop a protocol payload agnostic attack detection framework that leverages the round-trip time (RTT) anomalies between DNP3 requests and responses and can detect the presence of attacks without having to analyze the payload’s contents, while balancing trade-offs between false alarm counts, missed detections, and time to detection. To facilitate further research, we publicly release benign and attack network traffic exchanged between various sensors, controllers, and actuators in our grid-tied inverter testbed.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Local carbon reserves are insufficient for phloem terpene induction during drought in Pinus edulis in response to bark beetle–associated fungi

Stomatal closure during drought inhibits carbon uptake and may reduce a tree's defensive capacity. Limited carbon availability during drought may increase a tree's mortality risk, particularly if drought constrains trees' capacity to rapidly produce defenses during biotic attack. We parameterized a new model of conifer defense using physiological data on carbon reserves and chemical defenses before and after a simulated bark beetle attack in mature Pinus edulis under experimental drought. Attack was simulated using inoculations with a consistent bluestain fungus (Ophiostoma sp.) of Ips confusus, the main bark beetle colonizing this tree, to induce a defensive response. Trees with more carbon reserves produced more defenses but measured phloem carbon reserves only accounted for c. 23% of the induced defensive response. Our model predicted universal mortality if local reserves alone supported defense production, suggesting substantial remobilization and transport of stored resin or carbon reserves to the inoculation site. Our results show that de novo terpene synthesis represents only a fraction of the total measured phloem terpenes in P. edulis following fungal inoculation. Without direct attribution of phloem terpene concentrations to available carbon, many studies may be overestimating the scale and importance of de novo terpene synthesis in a tree's induced defense response.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2022

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

The electric power grid is increasingly becoming susceptible to cyber attacks that exploit vulnerabilities in the smart grid control, information, and physical layers. Successful cyber attacks can have catastrophic impacts on the social and economic well-being of any nation all over the globe. It has, thus, become imperative to secure the smart grid against such adversarial actions to ensure stable, secure, and reliable operation of the grid. The existing research and industry practices prove to be inadequate in terms of providing pragmatic and effective defense methodologies and measures for long-term cybersecurity planning and real-time cybersecurity for grid operation. For example, existing works lack models that incorporate uncertain behavior of cyber-attackers and pragmatic defense measures for cyber risk assessment and cybersecurity investment optimization which often provide unreliable and strictly qualitative solutions to these problems. At the same time, with the growing number of cyber incidents in the grid, there still exists a need to develop attack-resilient algorithms for wide-area monitoring, protection, and control (WAMPAC) applications like the wide-area voltage control systems (WAVCS) for Flexible AC Transmissions Systems (FACTS) that lack in scalable and feasible solutions from the cybersecurity perspective. This dissertation proposes novel models and methodologies for: (1) Cybersecurity planning, and (2) Cybersecurity for system operation. The cybersecurity planning is achieved through cyber risk assessment and cybersecurity resource investment optimization for long-term cybersecurity of the grid using game theory and attack-defense trees. Cybersecurity for system operation consists of development of cyber anomaly detection and mitigation algorithms for flexible AC transmission system (FACTS) controller-based wide-area voltage control systems (WAVCS) using machine learning (ML), and software defined networking-based moving target defense network routing for achieving real-time cyber-physical security for grid operations. This is followed by hardware-in-the-loop (HIL) implementation and evaluation of these attack prevention, detection, and mitigation algorithms and methodologies showcasing their feasibility in a close to real-world environment. For cybersecurity planning, a novel approach involving a combination of game theory and attack defense trees (ADT) for optimal cybersecurity resource allocation in the smart grid is proposed. This methodology involves modeling of the cyber-physical smart grid substations as ADTs, defining attacker costs, defense costs, and attack probabilities for attack access points. Using game theoretical formulation, optimal defense strategies for the defender of the system to invest cybersecurity resources in the grid are obtained. Additionally, a game-theoretic framework is developed for quantitative cyber-physical risk assessment of the grid under a dynamically changing cyber threat space and uncertain behavior of cyber attackers which is further used to optimize investments in the smart grid's cybersecurity resources. The attacker, defender, and the smart grid system are modeled while incorporating attacker-stochasticity and federal guidelines for smart grid cybersecurity. This allows quantification of threat, vulnerabilities, and attack impact of the grid for quantitative risk assessment. The defender's budget to invest in the security resources in the grid is optimized based on the strategies leading to minimum system risk. The evaluation of the proposed solutions highlight the feasibility for practical implementation of these methodologies and algorithms in the smart grid, while taking the federal requirements and guidelines for smart grid security into consideration. For achieving cybersecurity for system operation, attack prevention, detection, and mitigation algorithms and methodologies are developed specifically for FACTS-based WAVCS. Anomaly detection and mitigation in the WAVCS are achieved using algorithms based on machine learning which involves offline training and testing of ML models with CPS datasets incorporating physics-based features that allow accurate distinction between system faults and cyber attacks. For attack prevention, a methodology based on software defined network (SDN)-based moving target defense (MTD) network routing is proposed that enables prevention of Denial of Service (DoS) type attacks on the smart grid communication system. Subsequently, these methodologies and algorithms are implemented and evaluated on an HIL testbed that allows for real-time attack prevention, detection, and mitigation of emulated cyber attacks on the WAVCS in a close to real-world environment. The results show highly accurate and efficient performance of the implemented algorithms and methodologies with the smart grid system operating within the NERC's system operation limits even in the presence of DoS and data integrity cyber attacks. This work opens up future research opportunities in other directions such as (1) Expanding cybersecurity planning methodologies to real-time cyber contingency analysis with different game formulations; and (2) Applying the cybersecurity for system operation algorithms to broader categories of wide-area control applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

The Cost and Benefit of Enhancing Cybersecurity for Hybrid AC/DC Grids

As critical interfaces of AC grids and DC grids inside a hybrid AC/DC grid, the voltage-sourced-converter (VSC) has been demonstrated to be vulnerable to false data injection (FDI) cyber-attacks. As a result, the cyber-attack-induced AC grid frequency deviations and DC grid voltage deviations threaten the secure operation. Here, to enhance cybersecurity in a not only feasible but also cost-effective manner, this paper proposes a cost-benefit-based cyber-defense strategy for a hybrid AC/DC grid. First, this paper establishes a spatial-temporal dual cyber-attack evaluation model, in which the cyber-attack-induced frequency and voltage deviations are modelled in both a spatially and temporally dual manner. Then, the proposed cost-benefit-based cyber-defense strategy is modelled as a VSC commitment problem to achieve the trade-off between maximizing the cyber-defense benefits and minimizing the cyber-defense costs. The VSC commitment problem is then mathematically convexified into a mixed-integer second-order cone programming (MISOCP) problem, which could be efficiently solved in an event-triggered manner against unfolding cyber-attack events. Simulation results on a test hybrid AC/DC grid verified the feasibility and the cost-effectiveness of the proposed cyber-defense strategy.

cost-benefit analysis↗
DOE OSTI2022

Reinforcement Learning for feedback-enabled cyber resilience

The rapid growth in the number of devices and their connectivity has enlarged the attack surface and made cyber systems more vulnerable. As attackers become increasingly sophisticated and resourceful, mere reliance on traditional cyber protection, such as intrusion detection, firewalls, and encryption, is insufficient to secure the cyber systems. Cyber resilience provides a new security paradigm that complements inadequate protection with resilience mechanisms. A Cyber-Resilient Mechanism (CRM) adapts to the known or zero-day threats and uncertainties in real-time and strategically responds to them to maintain the critical functions of the cyber systems in the event of successful attacks. Feedback architectures play a pivotal role in enabling the online sensing, reasoning, and actuation process of the CRM. Reinforcement Learning (RL) is an important gathering of algorithms that epitomize the feedback architectures for cyber resilience. It allows the CRM to provide dynamic and sequential responses to attacks with limited or without prior knowledge of the environment and the attacker. In this work, we review the literature on RL for cyber resilience and discuss the cyber-resilient defenses against three major types of vulnerabilities, i.e., posture-related, information-related, and human-related vulnerabilities. Here we introduce moving target defense, defensive cyber deception, and assistive human security technologies as three application domains of CRMs to elaborate on their designs. The RL algorithms also have vulnerabilities themselves. We explain the major vulnerabilities of RL and present develop several attack models where the attacker target the information exchanged between the environment and the agent: the rewards, the state observations, and the action commands. We show that the attacker can trick the RL agent into learning a nefarious policy with minimum attacking effort. The paper introduces several defense methods to secure the RL-enabled systems from these attacks. However, there is still a lack of works that focuses on the defensive mechanisms for RL-enabled systems. Last but not least, we discuss the future challenges of RL for cyber security and resilience and emerging applications of RL-based CRMs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Escalation in the host-pathogen arms race: A host resistance response corresponds to a heightened bacterial virulence response

The zig-zag model of host-pathogen interaction describes the relative strength of defense response across a spectrum of pathogen-induced plant phenotypes. A stronger defense response results in increased resistance. Here, we investigate the strength of pathogen virulence during disease and place these findings in the context of the zig-zag model. Xanthomonas vasicola pv. holcicola ( Xvh ) causes sorghum bacterial leaf streak. Despite being widespread, this disease has not been described in detail at the molecular level. We divided diverse sorghum genotypes into three groups based on disease symptoms: water-soaked lesions, red lesions, and resistance. Bacterial growth assays confirmed that these three phenotypes represent a range of resistance and susceptibility. To simultaneously reveal defense and virulence responses across the spectrum of disease phenotypes, we performed dual RNA-seq on Xvh -infected sorghum. Consistent with the zig-zag model, the expression of plant defense-related genes was strongest in the resistance interaction. Surprisingly, bacterial virulence genes related to the type III secretion system (T3SS) and type III effectors (T3Es) were also most highly expressed in the resistance interaction. This expression pattern was observed at multiple time points within the sorghum- Xvh pathosystem. Further, a similar expression pattern was observed in Arabidopsis infected with Pseudomonas syringae for effector-triggered immunity via AvrRps4 but not AvrRpt2. Specific metabolites were able to repress the Xvh virulence response in vitro and in planta suggesting a possible signaling mechanism. Taken together, these findings reveal multiple permutations of the continually evolving host-pathogen arms race from the perspective of host defense and pathogen virulence responses.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2021

Symbiont-Mediated Protection of Acromyrmex Leaf-Cutter Ants from the Entomopathogenic Fungus Metarhizium anisopliae

Many fungus-growing ants engage in a defensive symbiosis with antibiotic-producing ectosymbiotic bacteria in the genus Pseudonocardia, which help protect the ants’ fungal mutualist from a specialized mycoparasite, Escovopsis. Here, using germfree ant rearing and experimental pathogen infection treatments, we evaluate if Acromyrmex ants derive higher immunity to the entomopathogenic fungus Metarhizium anisopliae from their Pseudonocardia symbionts. We further examine the ecological dynamics and defensive capacities of Pseudonocardia against M. anisopliae across seven different Acromyrmex species by controlling Pseudonocardia acquisition using ant-nonnative Pseudonocardia switches, in vitro challenges, and in situ mass spectrometry imaging (MSI). We show that Pseudonocardia protects the ants against M. anisopliae across different Acromyrmex species and appears to afford higher protection than metapleural gland (MG) secretions. Although Acromyrmex echinatior ants with nonnative Pseudonocardia symbionts receive protection from M. anisopliae regardless of the strain acquired compared with Pseudonocardia-free conditions, we find significant variation in the degree of protection conferred by different Pseudonocardia strains. Additionally, when ants were reared in Pseudonocardia-free conditions, some species exhibit more susceptibility to M. anisopliae than others, indicating that some ant species depend more on defensive symbionts than others. In vitro challenge experiments indicate that Pseudonocardia reduces Metarhizium conidiospore germination area. Our chemometric analysis using matrix-assisted laser desorption/ionization mass spectrometry imaging (MALDI-MSI) reveals that Pseudonocardia-carrying ants produce more chemical signals than Pseudonocardia-free treatments, indicating that Pseudonocardia produces bioactive metabolites on the Acromyrmex cuticle. Our results indicate that Pseudonocardia can serve as a dual-purpose defensive symbiont, conferring increased immunity for both the obligate fungal mutualist and the ants themselves.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2023

Reinforcement Learning Approach to Cybersecurity in Space (RELACSS)

Securing satellite groundstations against cyber-attacks is vital to national security missions. However, these cyber threats are constantly evolving. As vulnerabilities are discovered and patched, new vulnerabilities are discovered and exploited. In order to automate the process of discovering existing vulnerabilities and the means to exploit them, a reinforcement learning framework is presented in this report. We demonstrate that this framework can learn to successfully navigate an unknown network and detect nodes of interest despite the presence of a moving target defense. The agent then exfiltrates a file of interest from the node as quickly as possible. This framework also incorporates a defensive software agent that learns to impede the attacking agents progress. This setup allows for the agents to work against each other and improve their abilities. We anticipate that this capability will help uncover unforeseen vulnerabilities and the means to mitigate them. The modular nature of the framework enables users to swap out learning algorithms and modify the reward functions in order to adapt the learning tasks to various use cases and environments. Several algorithms, viz., tabular Q learning, deep Q networks, proximal policy optimization, advantage actor-critic, generative adversarial imitation learning, are explored for the agents and the results highlighted. The agent learns to solve the tasks in a light-weight abstract environment. Once the agent learns to perform sufficiently well, it can be deployed in a minimega virtual machine environment (or a real network) with wrappers that map abstract actions to software commands. The agent also uses a local representation of the actions called a ‘slot-mechanism’. This allows the agent to learn in a certain network and generalize it to different networks. The defensive agent learns to predict the actions taken by an offensive agent and uses that information to anticipate the threat. This information can then either be used to raise an alarm or to take actions to thwart the attack. We believe that with the appropriate reward design, a representative environment, and action set, this framework can be generalized to tackle other cybersecurity tasks. By sufficiently training these agents, we can anticipate vulnerabilities leading to robust future designs. We can also deploy automated defensive agents that can help secure satellite groundstation and their vital national security missions.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2023

Characterization of novel recombinant mycobacteriophages derived from homologous recombination between two temperate phages

Comparative analyses of mycobacteriophage genomes reveals extensive genetic diversity in genome organization and gene content, contributing to widespread mosaicism. We previously reported that the prophage of mycobacteriophage Butters (cluster N) provides defense against infection by Island3 (subcluster I1). To explore the anti-Island3 defense mechanism, we attempted to isolate Island3 defense escape mutants on a Butters lysogen, but only uncovered phages with recombinant genomes comprised of regions of Butters and Island3 arranged from left arm to right arm as Butters-Island3-Butters (BIBs). Recombination occurs within two distinct homologous regions that encompass lysin A, lysin B, and holin genes in one segment, and RecE and RecT genes in the other. Structural genes of mosaic BIB genomes are contributed by Butters while the immunity cassette is derived from Island3. Consequently, BIBs are morphologically identical to Butters (as shown by transmission electron microscopy) but are homoimmune with Island3. Recombinant phages overcome antiphage defense and silencing of the lytic cycle. We leverage this observation to propose a stratagem to generate novel phages for potential therapeutic use.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2024

OASIS: Offsetting Active Reconstruction Attacks in Federated Learning

Federated Learning (FL) has garnered significant attention for its potential to protect user privacy while enhancing model training efficiency. For that reason, FL has found its use in various domains, from health care to industrial engineering, especially where data cannot be easily exchanged due to sensitive information or privacy laws. However, recent research has demonstrated that FL protocols can be easily compromised by active reconstruction attacks executed by dishonest servers. These attacks involve the malicious modification of global model parameters, allowing the server to obtain a verbatim copy of users' private data by inverting their gradient updates. Tackling this class of attack remains a crucial challenge due to the strong threat model. In this paper, we propose a defense mechanism, namely OASIS, based on image augmentation that effectively counteracts active reconstruction attacks while preserving model performance. We first uncover the core principle of gradient inversion that enables these attacks and theoretically identify the main conditions by which the defense can be robust regardless of the attack strategies. We then construct our defense with image augmentation showing that it can undermine the attack principle. Comprehensive evaluations demonstrate the efficacy of the defense mechanism highlighting its feasibility as a solution.

deep neural networks↗
DOE OSTI2025

Securing Federated Learning Against Active Reconstruction Attacks

Federated Learning (FL) has amassed notable attention for its ability to preserve user privacy while emphasizing the retainment of model training efficiency. Due to this potential, FL has been integrated in many domains, such as healthcare, finance, law, and industrial engineering, where data cannot be easily exchanged due to sensitive information and strict privacy laws. However, current research has indicated that FL protocols are easily compromised by active data reconstruction attacks employed by actively dishonest servers. The malicious modification of global model parameters allows an actively dishonest server to obtain a direct copy of users’ private data via gradient inversion. Here, this class of attacks is highly underexplored and continues to be a major challenge due to the intense threat model. In this paper, we propose OASIS as a scalable and modality-agnostic defense based on data augmentation that counteracts active data reconstruction attacks while preserving model performance. To generalize our defense, we uncover the intuition behind gradient inversion that enables these attacks and theoretically establish the conditions by which the defense can be considered robust regardless of attack design. From this, we formulate our defense with data augmentation that illustrates its ability to undermine the attack principle. We evaluate OASIS on five real-world datasets–two image-based (ImageNet and CIFAR100) and three text-based (Wikitext, Stack Overflow, and Shakespeare)–which span diverse uses cases such as vision tasks and language modeling. Comprehensive evaluations on these datasets exhibit the efficacy of OASIS and highlight its feasibility as a solution.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Improved Biofuel Production through Discovery and Engineering of Terpene Metabolism in Switchgrass

Project Objectives - Of the myriad specialized metabolites that plants deploy to adapt to environmental challenges, terpenes form the largest group. In many major crops, unique terpene blends serve as key stress defenses that directly impact plant fitness and yield. In addition, terpenes, such as bisabolene and pinene, are used for producing renewable biofuels. Essential to advancing a broader use of terpenes for biofuel feedstock engineering is a system-wide knowledge of the diverse biosynthetic machinery and defensive potential of often species-specific terpene blends. The proposed project would merge genome-wide enzyme discovery with comparative –omics, protein structural and plant microbiome studies to define the biosynthesis and stress-defensive functions of the switchgrass (Panicum virgatum) terpene network. These insights would be combined with developing and applying non-transgenic genome editing tools to design plants with desirable terpene blends for higher productivity and biofuel production on marginal lands. As a dedicated lignocellulosic feedstock for U.S. biofuel production with high net energy yield, stress tolerance, and available genome resources, switchgrass is well-suited for devising new avenues for biofuel production. Project Description – The diversity of plant terpene defenses is governed by species-specific families of terpene synthase (TPS) and cytochrome P450 monooxygenase (P450) enzymes. Mining of the switchgrass genome (genotype Alamo) identified ~100 TPS and P450 candidate genes, and combinatorial biochemical analysis of synthesized TPSs and P450s revealed more than a dozen enzymes with common and novel activities. In addition, several identified terpene metabolites and the corresponding transcripts were up-regulated in response to abiotic stressors. These findings demonstrate a unique switchgrass terpene network with probable importance to abiotic stress tolerance, thus providing a large chemical portfolio for optimizing crop resistance, yield, and biofuel composition. Leveraging these preliminary data, we propose to generate a genome-wide map of the switchgrass terpene metabolic network through multi-gene co-expression analyses that allow the efficient cross-validation of TPS and P450 functions. Key enzymes would further be applied to structure-function studies via X-ray protein crystallography, homology modeling and site-directed mutagenesis to gain mechanistic insight into the catalytic specificity of switchgrass terpene metabolism and provide gene and amino acid targets for genome editing. In tandem with terpene pathway discovery, system-wide metabolomics, transcriptomics and proteomics studies in switchgrass accessions of contrasting drought tolerance would define the role of switchgrass terpene metabolism in conferring abiotic stress resilience. Metabolic changes would be assessed in a combined approach of targeted (terpenes) and untargeted metabolite profiling using a high-resolution LC-MS/MS approach, differential gene expression analyses through multiplexed Illumina RNA sequencing, and quantitative analysis of high-priority pathway enzymes using multiple reaction monitoring (MRM). Drawing on these insights, knock-down/out mutants of stress-associated pathway nodes would be generated by optimizing transient virus-induced gene silencing (VIGS) and CRISPR/Cas9 systems under control of the Tobacco Rattle Virus (TRV). The resulting mutant lines would then be analyzed for stress susceptibility and the impact on the root microbiome to define gene functions in planta. Knowledge of terpene pathways, enzyme mechanisms and bioactivities would be applied to enhance switchgrass stress resilience and to tailor-make terpene blends for biofuel production. Here, TRV-enabled CRISPR/Cas9 genome editing, including allele-specific knock-out of redundant genes, engineering of enzyme specificity via structure-guided point mutations, and overexpression of terpene genes relevant to stress-protection or biofuel production, would be used to increase metabolic flux toward desired pathways. Broader Impacts - Integrating the system-wide discovery, mechanistic analysis and non-transgenic genome engineering of the switchgrass terpene network aligns the required steps to unlock the chemical potential of this important metabolite class to generate crops that are more resistant to stress and provide advanced biofuel production in light of rising climate pressures as foreseeable challenges for bioenergy crop cultivation. The proposed project would further offer interdisciplinary student training through active involvement in the project and integration of research concepts and outcomes into newly-developed graduate and undergraduate courses on Plant Biotechnology.

09 BIOMASS FUELS↗
DOE OSTI2022

Cyber Resilient Flexible Alternating Current Transmission Systems (XFACTS)

This report summarizes the activities conducted under the DOE-OE funded project DEOE0000897, Cyber Attack Resilient Flexible AC Systems – XFACTS. Hitachi Energy (HE), in collaboration with ABB Inc. (ABB), Bonneville Power Administration (BPA), University of Illinois at Urbana-Champaign (UIUC), Iowa State University (ISU), and University of Idaho (UI) pursued the development of a system of defense for Flexible Alternating current Transmission Systems against cyber-attacks (XFACTS). A FACTS substation enhanced with XFACTS defense mechanisms will be capable of mitigating cyberattacks especially those that seek to control electrical parameters like voltage or current and interrupt the power flow in AC lines. It empowers existing FACTS controllers and associated intelligent electronic devices to detect and mitigate malicious intents to depress system voltages, destabilize power flows, trip AC circuit breakers, corrupt currents, and voltages, even if the malicious commands and the measurements have correct syntax. The XFACTS functions utilize the physics of active power electronic systems, control and protection, electric power engineering principles, and state estimation to bring more in-depth cyber defense closer to the protected FACTS substation devices.

24 POWER TRANSMISSION AND DISTRIBUTION↗