Reaction to Detected Cyberattacks in Smart Distribution Systems

De-regulation of power systems structure to “competitive electricity markets” created new ways to target network security via system congestion. However, moving towards a smarter grid in the recent years has increased the possibility of “cyberattacks” on distribution power networks which is a “more” serious threat for system security. This paper proposes a two-level decentralized framework for microgrid operators (MGOs) and the system operator (SO) of a smart distribution network to react to detected cyberattacks and prevent any system congestions. In the lower level, MGOs rely on Kalman filtering to replace the suspicious data with predicted data and avoid any possible congestions in the microgrid (MG) level. However, in the upper level, SO employs a market mechanism to motivate distributed generation aggregators (DGAGs) and demand response aggregators (DRAGs) in order to reschedule and prevent a possible system congestion caused by hackers targeting the system. The effectiveness of the proposed framework is validated on an unbalanced distribution system containing 4 microgrids, 2 industrial loads, and 26 apartment complexes which include distributed generation (DG) units, electric vehicles (EVs), and provide demand response (DR).