Graph-Based Cyber Attack Surface Assessment and Risk Prioritization in Smart Distribution Networks

The digital transformation of power distribution networks has significantly increased their exposure to cyber-physical threats, necessitating systematic approaches for vulnerability assessment and risk prioritization. This paper presents a graph-based framework for evaluating the cyber-attack surface of smart distribution networks and prioritizing security investments. The proposed methodology constructs an attack graph that models potential attack paths from cyber components (SCADA, RTUs, communication links) to physical assets (buses, distributed generation units). Critical nodes are identified using combined metrics including load magnitude, voltage deviation, and topological characteristics. Risk scores are computed by integrating attack cost and physical impact assessments. The framework is validated using the IEEE ۶۹-bus distribution network with six distributed generation units. Results reveal that distributed generation nodes and buses located at the end of radial feeders exhibit the highest risk scores. Bus ۶۱, characterized by a load of ۱.۲۴ MW and voltage of ۰.۹۱۲ per unit, is identified as the most critical node. The proposed framework provides system operators with a practical decision-support tool for allocating security resources effectively and enhancing the resilience of distribution networks against cyber threats.

کلیدواژه ها:

cyber-physical systems ، smart distribution networks ، Graph-Based Security Assessment ، risk prioritization ، distributed generation