Methods and systems for cyber-physical security modeling, simulation and architecture for the smart grid
A computer-implemented method for use in evaluating at least one threat to a complex system includes identifying one or more physical components of the complex system and modeling the one or more physical components with interactive software multi-agents. The multi-agents are programmed to monitor and control at least one function of the modeled physical components. One or more threats to a target of the complex system are identified. Each threat is defined as a cyber threat or physical threat and the target is defined as a cyber component or physical component. The method includes simulating an attack on the complex system by the identified threat and assessing an impact of the attack on the complex system.
1. A computer-implemented method for use in evaluating at least one threat to a complex system, said method comprising:
identifying one or more physical components of the complex system, wherein the one or more physical components include a microgrid that is coupled to a main grid;
modeling the one or more physical components with interactive software multi-agents, wherein the multi-agents are programmed to monitor and control at least one function of the modeled physical components;
identifying, using a threat model that identifies a cyber vulnerability associated with the one or more physical components, at least one threat to a targeted physical component of the one or more physical components of the complex system;
generating a threat report based on the at least one identified threat;
evaluating a threat severity based on the generated threat report;
assessing an impact of the at least one threat on the complex system; and
decoupling the microgrid from the main grid to operate the microgrid in an island mode in response to assessing the impact of the at least one threat.
2. The method according to claim 1 , wherein said modeling comprises modeling the multi-agents as at least one of a monitoring and control agent, a threat detection agent, a threat analysis agent, a threat response agent and a decision agent.
3. The method according to claim 1 , wherein evaluating a threat severity comprises evaluating a threat severity of a cyber attack to the one or more physical components.
4. The method according to claim 1 , wherein said assessing comprises assessing an impact of a smart grid.
5. The method according to claim 1 , wherein said identifying comprises identifying the physical components of the system as at least one of a distributed energy resource and an energy storage system.
6. The method according to claim 1 , further comprising:
accessing data comprising information about a state of the complex system and a physical environment of the complex system.
7. The method according to claim 1 , further comprising:
simulating the threat response to determine an effectiveness of the threat response.
8. The method according to claim 1 , further comprising:
evaluating a severity of the at least one identified threat, verifying the at least one identified threat has been correctly identified and providing a threat assessment report including the threat severity to a decision agent, wherein the decision agent accesses a vulnerability and mitigation engine that determines the threat response for the at least one identified threat using a multi-agent system based architecture.
9. A non-transitory computer-readable medium storing program instructions for use in evaluating at least one cyber and physical threat for a complex system, the program instructions causing a processor to:
identify one or more physical components of the complex system, wherein the one or more physical components include a microgrid that is coupled to a main grid;
model the one or more physical components with interactive software multi-agents, the multi-agents programmed to monitor and control at least one function of the modeled physical components;
identify, using a threat model that identifies a cyber vulnerability associated with the one or more physical components, at least one threat to a targeted physical component of the one or more physical components of the complex system;
generate a threat report based on the at least one identified threat;
evaluate a threat severity based on the generated threat report;
assess an impact of the at least one threat on the complex system; and
decouple the microgrid from the main grid to operate the microgrid in an island mode in response to assessing the impact of the at least one threat.
10. The computer-readable medium according to claim 9 , wherein the multi-agents comprise at least one monitoring and control agent, a threat detection agent, a threat analysis agent, a threat response agent and a decision agent.
11. The computer-readable medium according to claim 9 , wherein evaluating a threat severity comprises evaluating a threat severity of a cyber attack to the one or more physical components.
12. The computer-readable medium according to claim 9 , wherein the complex system comprises a smart grid.
13. The computer-readable medium according to claim 9 , wherein the physical components of the system comprise at least one of a distributed energy resource and an energy storage system.
14. The computer-readable medium according to claim 9 , further comprising instructions for:
accessing data comprising information about a state of the complex system and a physical environment of the complex system.
15. The computer-readable medium according to claim 9 , further comprising instructions for:
simulating the threat response to determine an effectiveness of the threat response.
16. The computer-readable medium according to claim 9 , further comprising instructions for:
evaluating a severity of the at least one identified threat, verifying the at least one identified threat has been correctly identified and providing a threat assessment report including the threat severity to a decision agent, wherein the decision agent accesses a vulnerability and mitigation engine that determines the threat response for the at least one identified threat.
17. A computer system in communication with a smart-grid, the computer system comprising:
a multi-agent system that:
identifies one or more physical components of the complex system, wherein the one or more physical components include a microgrid that is coupled to a main grid;
models the one or more physical components with interactive software multi-agents, the multi-agents programmed to monitor and control at least one function of the modeled physical components;
identifies, using a threat model that identifies a cyber vulnerability associated with the one or more physical components, at least one threat to a targeted physical component of the one or more physical components of the complex system;
generates a threat report based on the at least one identified threat;
evaluates a threat severity based on the generated threat report;
assesses an impact of the at least one threat on the complex system; and
decouples the microgrid from the main grid to operate the microgrid in an island mode in response to assessing the impact of the at least one threat.
18. The system according to claim 17 , wherein the multi-agents comprise at least one monitoring and control agent, a threat detection agent, a threat analysis agent, a threat response agent and a decision agent.
19. The system according to claim 17 , wherein evaluating a threat severity comprises evaluating a threat severity of a cyber attack to the one or more physical components.
20. The system according to claim 17 , wherein the complex system comprises a smart grid.