An Enhanced Energy Management System Including a Real-Time Load-Redistribution Threat Analysis Tool and Cyber-Physical SCED

It is possible to launch undetectable load-redistribution (LR) attacks against power systems, even in systems with protection schemes. Therefore, detecting LR attacks in power systems and establishing a corrective action to provide secured operating points are imperative. This paper develops a systematic real-time LR threat analysis (RTLRTA) tool, which can flag LR attacks and identify all affected transmission assets. Since attackers might introduce some forms of random processes to create LR attacks, we introduce an optimization model to generate random LR attacks so we can determine accurate thresholds for our detection index and test the tool's functionality when there are random LR attacks. Additionally, based on an estimation for the actual loads in the post-attack stage, we design a set of physical line flow security constraints (PLFSCs) that can be added to the existing security-constrained economic dispatch (SCED) models. We call the new model cyber-physical SCED (CPSCED), which appropriately responds to the identified LR attacks and provides secured dispatch points. We generate multiple scenarios of random LR attacks and noise errors for different target lines in the <formula><tex>$2383$</tex></formula>-bus Polish test system to validate our proposed methods' accuracy and functionality in detecting LR attacks and responding to them.