针对电力CPS数据驱动算法对抗攻击的防御方法  

Defense Methods for Adversarial Attacks Against Power CPS Data-Driven Algorithms

作　　者：朱卫平 汤奕[2] 魏兴慎 刘增稷 ZHU Weiping;TANG Yi;WEI Xingshen;LIU Zengji(State Grid Jiangsu Electric Power Co.,Ltd.,Nanjing 210024,China;School of Electrical Engineering,Southeast University,Nanjing 211189,China;NARI Group Corporation(State Grid Electric Power Research Institute),Nanjing 211106,China)

机构地区：[1]国网江苏省电力有限公司,江苏南京210024 [2]东南大学电气工程学院,江苏南京211189 [3]南瑞集团有限公司(国网电力科学研究院有限公司),江苏南京211106

出　　处：《中国电力》2024年第9期32-43,共12页Electric Power

基　　金：国家电网有限公司科技项目(面向新型配电系统的网络安全动态防御关键技术深化研究,5400-202340217A-1-1-ZN)。

摘　　要：大规模电力电子设备的接入为系统引入了数量庞大的强非线性量测/控制节点,使得传统电力系统逐渐转变为电力信息物理系统(cyber-physical system,CPS),许多原本应用模型驱动方法解决的系统问题不得不因维度灾难等局限转而采取数据驱动算法进行分析。然而,数据驱动算法自身的缺陷为系统的安全稳定运行引入了新的风险,攻击者可以对其加以利用,发起可能引发系统停电甚至失稳的对抗攻击。针对电力CPS中数据驱动算法可能遭受的对抗攻击,从异常数据剔除与恢复、算法漏洞挖掘与优化、算法自身可解释性提升3个方面,提出了对应的防御方法:异常数据过滤器、基于生成式对抗网络(generative adversarial network,GAN)的漏洞挖掘与优化方法、数据-知识融合模型及其训练方法,并经算例分析验证了所提方法的有效性。The integration of large-scale power electronic devices has introduced a large number of strong nonlinear measurement/control nodes into the system,gradually transforming the traditional power system into a cyber physical system(CPS).Many system problems that were originally solved by model-driven methods have had to be analyzed using data-driven algorithms due to limitations such as dimensional disasters.However,the inherent flaws of data-driven algorithms introduce new risks to the safe and stable operation of the system,which attackers can exploit to launch adversarial attacks that may cause system power outages and even instability.In response to the potential adversarial attacks on data-driven algorithms in power CPS,this paper proposes corresponding defense methods from such three aspects as abnormal data filtering and recovery,algorithm vulnerability mining and optimization,and algorithm self interpretability improvement:abnormal data filter,GAN-based vulnerability mining and optimization method,data knowledge fusion model and its training method.The effectiveness of the proposed method is verified through case analysis.

关 键 词：对抗攻击 数据驱动算法 电力CPS 攻击防御 

分 类 号：TM73[电气工程—电力系统及自动化] TP18[自动化与计算机技术—控制理论与控制工程]