Source-linked AI summary
On the Definition of Cyber-Physical Resilience in Power Systems
Reza Arghandeh, Alexandra von Meier, Laura Mehrmanesh, Lamine Mili
TL;DR
Power systems lack a clear, tailored definition of cyber-physical resilience despite growing cyber-physical interdependencies and threats to grid integrity. The paper reviews related concepts and proposes a practical definition centered on maintaining customer electricity flow through agile, time-sensitive responses, including distributed energy resources. It concludes that resilience assessment must explicitly link cyber and physical components, while noting that risk assessment alone may be inadequate.
Problem
Power systems lack a clear, universally accepted cyber-physical resilience definition despite increasing cyber-physical interdependencies and disturbances threatening grid integrity.
Method
The paper reviews resilience-related concepts, develops a power-system framework, and considers distributed energy resources and intelligent control for disturbance response.
Results
The paper establishes a tailored practical definition in which cyber-physical resilience maintains continuous customer electricity flow through real-time or semi-real-time agile changes to structure, loads, and resources.
Takeaways & Limitations
Power-system resilience assessment should consider cyber-physical links, temporal disturbance and mitigation factors, and operation beyond risk assessment, reliability, and stability.
Takeaways & Limitations
Risk assessment may not adequately provide a specified degree of resilience because resilience addresses unexpected failures and depends on disturbance and mitigation timing.
Abstract
from arXiv · showhide
In recent years, advanced sensors, intelligent automation, communication networks, and information technologies have been integrated into the electric grid to enhance its performance and efficiency. Integrating these new technologies has resulted in more interconnections and interdependencies between the physical and cyber components of the grid. Natural disasters and man-made perturbations have begun to threaten grid integrity more often. Urban infrastructure networks are highly reliant on the electric grid and consequently, the vulnerability of infrastructure networks to electric grid outages is becoming a major global concern. In order to minimize the economic, social, and political impacts of power system outages, the grid must be resilient. The concept of a power system cyber-physical resilience centers around maintaining system states at a stable level in the presence of disturbances. Resilience is a multidimensional property of the electric grid, it requires managing disturbances originating from physical component failures, cyber component malfunctions, and human attacks. In the electric grid community, there is not a clear and universally accepted definition of cyber-physical resilience. This paper focuses on the definition of resilience for the electric grid and reviews key concepts related to system resilience. This paper aims to advance the field not only by adding cyber-physical resilience concepts to power systems vocabulary, but also by proposing a new way of thinking about grid operation with unexpected disturbances and hazards and leveraging distributed energy resources.
2. The “Pillars of Resilience” Concept
The paper develops resilience from risk concepts, distinguishing hazards, vulnerability, capacity, severity, and risk while arguing that resilience must address disruption magnitude, duration, and recovery. It proposes a broader, time-sensitive view that goes beyond risk assessment and supports active grid operation.
- From Risk Assessment to Resilience: Risk assessment characterizes undesired events and losses through scenario, likelihood, and consequence distributions.The paper also represents risk using hazard vulnerability and severity in the PAR model.
- From Risk Assessment to Resilience: The PAR model views disasters as intersections of hazards and vulnerability, with capacity shaping potential damage.Hazards include natural phenomena and malicious or terrorist attacks; capacity includes adaptation and damage moderation.
- From Risk Assessment to Resilience: Risk frameworks describe damage using disturbance probability, severity, vulnerability, and system capacity to absorb disturbances.The paper presents the conceptual PAR risk framework as a basis for connecting risk assessment to resilience.
- Going Beyond Robustness: Resilience requires timely actions to maintain functionality, emphasizing response time and service availability beyond conventional risk assessment.The paper argues that resilience analysis should be holistic, rigorous, and temporal, while distinguishing resilience from robustness.
- The Meaning of Resilience: Resilience is defined as reducing the magnitude and duration of disruption while downgrading functionality and altering structure agilely.This definition emphasizes adaptation during unexpected disturbances rather than only resistance before failure.
3. A Framework for Power System Cyber-‐Physical Resilience
The framework defines cyber-physical resilience as maintaining electricity service while recognizing, absorbing, adapting to, and recovering from disturbances. It extends risk assessment by incorporating temporal exposure, survivability, self-healing, and dynamic vulnerability analysis.
- Definition: Power system cyber-physical resilience maintains continuous electricity flow under a specified load prioritization scheme while responding to disturbances in real or semi-real time.The system can alter its structure, loads, and resources agilely to avoid service interruptions.
- Resilient operation: Resilience combines absorbing potential, or enduring disturbance consequences, with recovery potential, or reorganizing toward normal or restorative operation.These potentials are embedded in resilient operation settings that establish new operating equilibria after disturbances.
- Beyond risk assessment: Unlike risk assessment, resilience considers hazard exposure duration and emphasizes timely response rather than treating disturbance probability as crucial.Longer-lasting hazards require stronger real-time resilience responses because they can cause more grid damage.
- Assessment framework: The framework replaces time-domain vulnerability with survivability and bases resilience capacity on network self-healing characteristics.Reaction time, durability, and survivability are central to maintaining service availability after disturbances.
- Assessment framework: Resilience assessment begins with system identification and model validation, establishing topology, physical characteristics, operational constraints, and dynamic behavior.Subsequent vulnerability analysis evaluates time-dependent consequences and system responses before, during, and after disturbances as an ongoing process.
4. Vulnerabilities in Power Systems
Power-system vulnerabilities span physical infrastructure, cyber infrastructure, and coupled cyber-physical components. The section highlights weather damage, cyber intrusions, control-system convergence, and the need for resilient monitoring and communication.
- Vulnerability classes: Disturbing events affect physical grid components and sensors, cyber infrastructure and communications, or correlated cyber-physical control and estimation systems.This classification reflects the grid’s combination of physical components, sensors, communication devices, databases, and software.
- Physical vulnerabilities: Severe weather primarily disrupts aerial lines, while transformers are also highly vulnerable; line hardening and structural reinforcement can mitigate damage.Weather-related faults can trigger breaker lockouts, safety hazards, and fires.
- Cyber vulnerabilities: Cyber intrusions exploit expanded access points to disclose measurements, cause denial of service, inject commands or measurements, and damage grid components.The four listed attack categories are reconnaissance, denial of service, command injection, and measurement injection.
- Cyber-physical vulnerabilities: Because cyber and physical components are linked, cyber-physical vulnerability analysis should begin with control systems where the two domains converge.Intelligent electronic and measurement devices combine communication, data processing, control, and protection functions.
- Cyber-physical vulnerabilities: SCADA, AMI, and DER control systems support reliability services but must remain resilient to disturbances while maintaining grid performance.Figure 4’s control architecture exchanges measurement and actuation signals through communication lines, including AMI and HAN links.
5. Distributed Energy Resources in Microgrids, a Case Study for System Resilience
Distributed energy resources and microgrids provide local energy, ancillary services, and operational flexibility for surviving and recovering from extreme events. The proposed approach combines monitoring, intelligent control, partitioning, prioritization, and load management.
- System requirements: A resilient power system combines structural flexibility, modularity, distributed decision-making, intelligent control, and communication capabilities.Achieving this requires system knowledge across historical, real-time, and forecasting timescales, which current monitoring systems typically lack.
- Microgrids and control: Resilience strategies include islanding distribution systems, building AC and DC microgrids, deploying DER, controlling power flows, and using distributed-agent control.These measures seek general contingency solutions that reduce disturbance impacts.
- DER-enabled resilience: DER—including renewable generation, electric vehicles, and controllable loads—can provide local energy and ancillary services after extreme events.These resources create opportunities to help the grid survive and recover from disturbances.
- Microgrids and control: A combined solution uses intelligent transmission-side contingency control with DER adoption and microgrids on the distribution side.It also requires measurement devices, coordinated controls, communications, and hierarchical control for data transmission and analysis.
- Emergency operation: During emergencies, intelligent distribution management uses synchronized monitoring, updated alarms, DER, controllable loads, storage, and switches for disturbance detection and resilient control.IEEE 1547 and California Rule 21 provide initial regulatory foundations for DER interconnection, operation, and measurement.
6. Conclusions and Future Work
The paper argues that cyber-physical resilience in power transmission and distribution networks lacks a tailored definition and must account for cyber-physical interdependencies. It reviews related concepts and proposes a practical definition while outlining quantitative assessment as future work.
- The literature lacks a clear, power-system-specific definition of cyber-physical resilience, particularly across transmission and distribution networks.Previous work focuses mainly on risk assessment and robustness, while cyber-physical links require explicit consideration.
- The paper reviews risk, hazard, vulnerability, and severity to distinguish risk assessment from resilience assessment.It also examines how robustness, reliability, and stability relate to resilience in power-system operation.
- Resilience extends beyond risk assessment through timely actions that preserve adequate system functionality during risks, sudden changes, and threats.The paper frames resilience analysis as more holistic, rigorous, and temporal than traditional risk assessment.
- The paper establishes a tailored and practical definition of cyber-physical resilience for power transmission and distribution networks.This definition is intended to support resilient distribution-network operation beyond reliability and stability.
- Future work will use a probabilistic time-domain framework to construct quantitative metrics and classify disturbing events by resultant damage likelihood.