Man‐in‐the‐middle attacks and defence in a power system cyber‐physical testbed

Man-in-The-Middle (MiTM) attacks present numerous threats to a smart grid. In MiTM attack, an intruder embeds itself within conversation between two devices either eavesdrop or impersonate one of the devices, making it appear be normal exchange information. Thus, can perform false data injection (FDI) and command (FCI) that compromise power system operations, such as state estimation, economic dispatch, automatic generation control (AGC). Very few researchers have focused on methods are difficult detect To address this, we designing implementing multi-stage intrusions in emulation-based cyber-physical testbed against large-scale synthetic grid model demonstrate how cause physical contingencies misguided operation measurements. create FCI, FDI, replay this This work enables stakeholders defend these stealthy attacks, detection mechanisms developed using multiple alerts from intrusion systems network monitoring tools. Our contribution will enable other security industry develop further for inconspicuous attacks.