Resumen:
The increasing penetration of Distributed Energy Resources (DER) expands the cyberattack surface of power systems. This paper analyses, using PowerFactory, the impact and success of MaDIoT 3.0 attacks in the PST-16 model, a simplified model of the European system. MaDIoT 3.0 attacks are a novel type of attack that manage to compromise both high-wattage IoT demand devices and DER devices at the same time. The results indicate that the inclusion of distributed solar PV generation in the PST-16 system reduces the success ratio and impact of load-altering MaDIoT attacks when compared to the same system without DER, mainly due to an increment of the initial voltages. For MaDIoT 3.0 attacks, the demand had a more significant influence on the attack’s success than DER in the PST-16 system. Distributing the attacked demand across more buses or targeting the demand from other areas would decrease the success ratio of the attack. Therefore, the local scalability and replicability of vulnerable high-wattage demand devices in the analysed system become more critical than their distributed deployment in larger areas.
Resumen divulgativo:
Este paper analiza el impacto y éxito de ataques MaDIoT 3.0, que combinan ataques a dispositivos IoT de alto consumo en la demanda con ataques a generanción distribuida que conlleva la desconexión de estos recursos del sistema.
Palabras Clave: Cyberattack, power system dynamics, MaDIoT, load altering attacks, distributed energy resources, power system stability.
Índice de impacto JCR-JIF y cuartil WoS: 3,200 - Q2 (2024)
Referencia DOI:
https://doi.org/10.1109/OAJPE.2025.3595631
Publicado en papel: 2025.
Publicado on-line: Agosto 2025.
Cita:
N. Rodríguez Pérez, J. Matanza, L. Sigrist, J.L. Rueda Torres, G. López, "MaDIoT 3.0: Assessment of Attacks to Distributed Energy Resources and Demand in a Power System", IEEE Open Access Journal of Power and Energy, Vol. 12, pp. 552 - 563, 2025. [Online: Agosto 2025] doi: 10.1109/OAJPE.2025.3595631
Descargar el artículo