@article{KayemMeinelWolthusen2018,
  author    = {Kayem, Anne Voluntas dei Massah and Meinel, Christoph and Wolthusen, Stephen D.},
  title     = {A resilient smart micro-grid architecture for resource constrained environments},
  series = {Smart Micro-Grid Systems Security and Privacy},
  volume    = {71},
  journal   = {Smart Micro-Grid Systems Security and Privacy},
  publisher = {Springer},
  address   = {Dordrecht},
  isbn      = {978-3-319-91427-5},
  doi       = {10.1007/978-3-319-91427-5_5},
  pages     = {71 -- 101},
  year      = {2018},
  abstract  = {Resource constrained smart micro-grid architectures describe a class of smart micro-grid architectures that handle communications operations over a lossy network and depend on a distributed collection of power generation and storage units. Disadvantaged communities with no or intermittent access to national power networks can benefit from such a micro-grid model by using low cost communication devices to coordinate the power generation, consumption, and storage. Furthermore, this solution is both cost-effective and environmentally-friendly. One model for such micro-grids, is for users to agree to coordinate a power sharing scheme in which individual generator owners sell excess unused power to users wanting access to power. Since the micro-grid relies on distributed renewable energy generation sources which are variable and only partly predictable, coordinating micro-grid operations with distributed algorithms is necessity for grid stability. Grid stability is crucial in retaining user trust in the dependability of the micro-grid, and user participation in the power sharing scheme, because user withdrawals can cause the grid to breakdown which is undesirable. In this chapter, we present a distributed architecture for fair power distribution and billing on microgrids. The architecture is designed to operate efficiently over a lossy communication network, which is an advantage for disadvantaged communities. We build on the architecture to discuss grid coordination notably how tasks such as metering, power resource allocation, forecasting, and scheduling can be handled. All four tasks are managed by a feedback control loop that monitors the performance and behaviour of the micro-grid, and based on historical data makes decisions to ensure the smooth operation of the grid. Finally, since lossy networks are undependable, differentiating system failures from adversarial manipulations is an important consideration for grid stability. We therefore provide a characterisation of potential adversarial models and discuss possible mitigation measures.},
  language  = {en}
}
@article{AmbassaKayemWolthusenetal.2018,
  author    = {Ambassa, Pacome L. and Kayem, Anne Voluntas dei Massah and Wolthusen, Stephen D. and Meinel, Christoph},
  title     = {Inferring private user behaviour based on information leakage},
  series = {Smart Micro-Grid Systems Security and Privacy},
  volume    = {71},
  journal   = {Smart Micro-Grid Systems Security and Privacy},
  publisher = {Springer},
  address   = {Dordrecht},
  isbn      = {978-3-319-91427-5},
  doi       = {10.1007/978-3-319-91427-5_7},
  pages     = {145 -- 159},
  year      = {2018},
  abstract  = {In rural/remote areas, resource constrained smart micro-grid (RCSMG) architectures can provide a cost-effective power supply alternative in cases when connectivity to the national power grid is impeded by factors such as load shedding. RCSMG architectures can be designed to handle communications over a distributed lossy network in order to minimise operation costs. However, due to the unreliable nature of lossy networks communication data can be distorted by noise additions that alter the veracity of the data. In this chapter, we consider cases in which an adversary who is internal to the RCSMG, deliberately distorts communicated data to gain an unfair advantage over the RCSMG's users. The adversary's goal is to mask malicious data manipulations as distortions due to additive noise due to communication channel unreliability. Distinguishing malicious data distortions from benign distortions is important in ensuring trustworthiness of the RCSMG. Perturbation data anonymisation algorithms can be used to alter transmitted data to ensure that adversarial manipulation of the data reveals no information that the adversary can take advantage of. However, because existing data perturbation anonymisation algorithms operate by using additive noise to anonymise data, using these algorithms in the RCSMG context is challenging. This is due to the fact that distinguishing benign noise additions from malicious noise additions is a difficult problem. In this chapter, we present a brief survey of cases of privacy violations due to inferences drawn from observed power consumption patterns in RCSMGs centred on inference, and propose a method of mitigating these risks. The lesson here is that while RCSMGs give users more control over power management and distribution, good anonymisation is essential to protecting personal information on RCSMGs.},
  language  = {en}
}
@article{KayemWolthusenMeinel2018,
  author    = {Kayem, Anne Voluntas dei Massah and Wolthusen, Stephen D. and Meinel, Christoph},
  title     = {Power Systems},
  series = {Smart Micro-Grid Systems Security and Privacy},
  volume    = {71},
  journal   = {Smart Micro-Grid Systems Security and Privacy},
  publisher = {Springer},
  address   = {Dordrecht},
  isbn      = {978-3-319-91427-5},
  doi       = {10.1007/978-3-319-91427-5_1},
  pages     = {1 -- 8},
  year      = {2018},
  abstract  = {Studies indicate that reliable access to power is an important enabler for economic growth. To this end, modern energy management systems have seen a shift from reliance on time-consuming manual procedures, to highly automated management, with current energy provisioning systems being run as cyber-physical systems. Operating energy grids as a cyber-physical system offers the advantage of increased reliability and dependability, but also raises issues of security and privacy. In this chapter, we provide an overview of the contents of this book showing the interrelation between the topics of the chapters in terms of smart energy provisioning. We begin by discussing the concept of smart-grids in general, proceeding to narrow our focus to smart micro-grids in particular. Lossy networks also provide an interesting framework for enabling the implementation of smart micro-grids in remote/rural areas, where deploying standard smart grids is economically and structurally infeasible. To this end, we consider an architectural design for a smart micro-grid suited to low-processing capable devices. We model malicious behaviour, and propose mitigation measures based properties to distinguish normal from malicious behaviour.},
  language  = {en}
}
@misc{KayemMeinelWolthusen2018,
  author    = {Kayem, Anne Voluntas dei Massah and Meinel, Christoph and Wolthusen, Stephen D.},
  title     = {Smart micro-grid systems security and privacy preface},
  series = {Smart micro-grid systems security and privacy},
  volume    = {71},
  journal   = {Smart micro-grid systems security and privacy},
  publisher = {Springer},
  address   = {Dordrecht},
  isbn      = {978-3-319-91427-5},
  doi       = {10.1007/978-3-319-91427-5_1},
  pages     = {VII -- VIII},
  year      = {2018},
  abstract  = {Studies indicate that reliable access to power is an important enabler for economic growth. To this end, modern energy management systems have seen a shift from reliance on time-consuming manual procedures , to highly automated management , with current energy provisioning systems being run as cyber-physical systems . Operating energy grids as a cyber-physical system offers the advantage of increased reliability and dependability , but also raises issues of security and privacy. In this chapter, we provide an overview of the contents of this book showing the interrelation between the topics of the chapters in terms of smart energy provisioning. We begin by discussing the concept of smart-grids in general, proceeding to narrow our focus to smart micro-grids in particular. Lossy networks also provide an interesting framework for enabling the implementation of smart micro-grids in remote/rural areas, where deploying standard smart grids is economically and structurally infeasible. To this end, we consider an architectural design for a smart micro-grid suited to low-processing capable devices. We model malicious behaviour, and propose mitigation measures based properties to distinguish normal from malicious behaviour .},
  language  = {en}
}
@article{MarufuKayemWolthusen2018,
  author    = {Marufu, Anesu M. C. and Kayem, Anne Voluntas dei Massah and Wolthusen, Stephen D.},
  title     = {The design and classification of cheating attacks on power marketing schemes in resource constrained smart micro-grids},
  series = {Smart Micro-Grid Systems Security and Privacy},
  volume    = {71},
  journal   = {Smart Micro-Grid Systems Security and Privacy},
  publisher = {Springer},
  address   = {Dordrecht},
  isbn      = {978-3-319-91427-5},
  doi       = {10.1007/978-3-319-91427-5_6},
  pages     = {103 -- 144},
  year      = {2018},
  abstract  = {In this chapter, we provide a framework to specify how cheating attacks can be conducted successfully on power marketing schemes in resource constrained smart micro-grids. This is an important problem because such cheating attacks can destabilise and in the worst case result in a breakdown of the micro-grid. We consider three aspects, in relation to modelling cheating attacks on power auctioning schemes. First, we aim to specify exactly how in spite of the resource constrained character of the micro-grid, cheating can be conducted successfully. Second, we consider how mitigations can be modelled to prevent cheating, and third, we discuss methods of maintaining grid stability and reliability even in the presence of cheating attacks. We use an Automated-Cheating-Attack (ACA) conception to build a taxonomy of cheating attacks based on the idea of adversarial acquisition of surplus energy. Adversarial acquisitions of surplus energy allow malicious users to pay less for access to more power than the quota allowed for the price paid. The impact on honest users, is the lack of an adequate supply of energy to meet power demand requests. We conclude with a discussion of the performance overhead of provoking, detecting, and mitigating such attacks efficiently.},
  language  = {en}
}