论文标题
基于逆变器的网络物理微电网中固件攻击的硬件辅助检测
Hardware-Assisted Detection of Firmware Attacks in Inverter-Based Cyberphysical Microgrids
论文作者
论文摘要
电网现代化工作依赖于微电网(MG)系统的广泛部署。 MGS整合可再生资源和能源存储系统,从而使经济和零碳足迹电力,使用当地能源为社区提供可持续的能源,并增强电网弹性。 MGS作为网络物理系统包括互连的设备,这些设备可以测量,控制和促使能源资源和负载。为了获得最佳操作,网络物理MGS通过智能逆变器启用的支持功能来调节现场能量的产生。智能逆变器(作为基于消费电子固件的设备)容易受到安全威胁的影响。如果逆变器受恶意控制,它们可能会严重破坏MG的运行和电力输送,并影响电网稳定性。在本文中,我们演示了拒绝服务(DOS)以及控制器和设定点修改对模拟MG系统的影响。此外,我们将定制的硬件性能计数器(HPC)作为设计(DFS)原始词来检测MG逆变器的恶意固件修改。建议的HPC定期测量MG逆变器固件代码中各种指令类型的顺序。我们的实验表明,我们的定制HPC使用各种基于机器学习的分类器成功识别了固件修改。
The electric grid modernization effort relies on the extensive deployment of microgrid (MG) systems. MGs integrate renewable resources and energy storage systems, allowing to generate economic and zero-carbon footprint electricity, deliver sustainable energy to communities using local energy resources, and enhance grid resilience. MGs as cyberphysical systems include interconnected devices that measure, control, and actuate energy resources and loads. For optimal operation, cyberphysical MGs regulate the onsite energy generation through support functions enabled by smart inverters. Smart inverters, being consumer electronic firmware-based devices, are susceptible to increasing security threats. If inverters are maliciously controlled, they can significantly disrupt MG operation and electricity delivery as well as impact the grid stability. In this paper, we demonstrate the impact of denial-of-service (DoS) as well as controller and setpoint modification attacks on a simulated MG system. Furthermore, we employ custom-built hardware performance counters (HPCs) as design-for-security (DfS) primitives to detect malicious firmware modifications on MG inverters. The proposed HPCs measure periodically the order of various instruction types within the MG inverter's firmware code. Our experiments illustrate that the firmware modifications are successfully identified by our custom-built HPCs utilizing various machine learning-based classifiers.