Koopman Operator-based Detection-Isolation of Cyberattack: A Case Study on Electric Vehicle Charging

TL;DR

This paper introduces a Koopman operator-based model-free method for detecting and isolating cyberattacks in cyber-physical systems, demonstrated through a case study on electric vehicle charging.

Contribution

It proposes a novel Koopman operator-based approach for real-time cyberattack detection and isolation that requires limited measurements and is applicable to complex CPS.

Findings

Effective detection and isolation of cyberattacks demonstrated in simulation

Requires limited system measurements for training

Applicable to electric vehicle charging systems

Abstract

One of the key challenges towards the reliable operation of cyber-physical systems (CPS) is the threat of cyberattacks on system actuation signals and measurements. In recent years, system theoretic research has focused on effectively detecting and isolating these cyberattacks to ensure proper restorative measures. Although both model-based and model-free approaches have been used in this context, the latter are increasingly becoming more popular as complexities and model uncertainties in CPS increases. Thus, in this paper we propose a Koopman operator-based model-free cyberattack detection-isolation scheme for CPS. The algorithm uses limited system measurements for its training and generates real-time detection-isolation flags. Furthermore, we present a simulation case study to detect and isolate actuation and sensor attacks in a Lithium-ion battery system of a plug-in electric vehicle during charging.