The integration of remote control and digitalization in intelligent power systems has introduced significant cybersecurity risks, particularly from malicious attacks targeting protection systems, which can lead to operational disruptions and line outages. However, such outages may also arise from system faults, protection failures, or circuit breaker malfunctions. To address this challenge, this article introduces a novel methodology based on waveform analysis. The proposed approach leverages transient kinetic energy analysis and real-time circuit breaker monitoring to differentiate between cyber-attacks and other causes of line outages. By analyzing waveform data from circuit breaker (CB) coil current and contact travel, the method extracts timing features to assess CB health. Probability distribution curves are generated for each feature, enabling new measurements to be compared within these distributions to evaluate CB conditions. Numerical simulations on a modified IEEE 39-bus test system, supported by experimental tests, reveal a key finding: during power system faults, a distinct time delay occurs between abrupt changes in transient kinetic energy and the initiation of line outages. In contrast, this delay is absent in cases of cyber-attacks and circuit breaker failures. This innovative method can be seamlessly integrated into supervisory control and data acquisition systems, enabling real-time identification of the root causes of outages and significantly enhancing the cybersecurity of power systems.
Resilient Cyber-Physical Power Protection Systems Using Transient Kinetic Energy Method
EsmaeiliShayan, Mostafa;
2025-01-01
Abstract
The integration of remote control and digitalization in intelligent power systems has introduced significant cybersecurity risks, particularly from malicious attacks targeting protection systems, which can lead to operational disruptions and line outages. However, such outages may also arise from system faults, protection failures, or circuit breaker malfunctions. To address this challenge, this article introduces a novel methodology based on waveform analysis. The proposed approach leverages transient kinetic energy analysis and real-time circuit breaker monitoring to differentiate between cyber-attacks and other causes of line outages. By analyzing waveform data from circuit breaker (CB) coil current and contact travel, the method extracts timing features to assess CB health. Probability distribution curves are generated for each feature, enabling new measurements to be compared within these distributions to evaluate CB conditions. Numerical simulations on a modified IEEE 39-bus test system, supported by experimental tests, reveal a key finding: during power system faults, a distinct time delay occurs between abrupt changes in transient kinetic energy and the initiation of line outages. In contrast, this delay is absent in cases of cyber-attacks and circuit breaker failures. This innovative method can be seamlessly integrated into supervisory control and data acquisition systems, enabling real-time identification of the root causes of outages and significantly enhancing the cybersecurity of power systems.I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.


