DOI: 10.5281/zenodo.12949260
title: Dataset for Sandboxing use case SUC2 related to cyber attacks affecting Wide Area Protection

description: This dataset is related to the operation of the second KIOS CoE sandboxing use case (SUC2) which inclused 3 scenarios (S1-S3) which examins the behavious a WAP scheme of power grids in case of a short circuit fault and in case of two types of cyber attacks. The description of the architecture of the University of Cyprus/ KIOS CoE sandboxing environmnet used for extracting these datasets along with the full list of scenarios and their detailed implementation are described in the supporting documents.

Brief description of each of the 3 scenarios of this SUC2 are provided below.

The datasets for the first scenario (S1) of SUC2 examines the operation of a wide area protection scheme in a transmission line which receives data sent from PMUs at the two ends of the lines, when a short-circuit fault occurred in the range of the transmission line between buses 7 and 8 of the system. More details about the scenario SUC2/S1 related to this scenario's dataset can be found in Section 1.3.1 of the SUC2 supporting document. The dataset includes electrical measurements of the current flow in line 7-8 (of the IEEE 9-bus system), in both magnitude and sinusoidal form. The dataset is provided in the form of time-series measurements available as MATLAB (.mat) and CSV files, which were recorded with a 30-second and 40-second time resolution, respectively. The measurements of RMS values were recorded by the Typhoon controller as they were sent by the two PMUs, while the sine wave measurements were recorder through the OPAL-RT

The datasets for second scenario (S2) of SUC2 investigates the operation of a wide area protection scheme which receives data sent from PMUs when a MITM FDI cyber-attack is conducted on the measurements of bus 7, virtually implemented within the sandboxing, and introduces a multiplicative change to the current measurements before they are received by the Typhoon controller via IEEE C37.118 protocol. Section 1.3.2 of the SUC2 supporting document provides more details about the scenario related to this dataset. This dataset includes electrical measurements of the current flow, in magnitude and sinusoidal format, of the transmission line between buses 7 and 8 of the digital twin of the IEEE 9-bus system. The dataset is provided in the form of time-series measurements available as MATLAB (.mat) and CSV files which were recorded with a 30-second and 40-second time resolution, respectively. The measurements of magnitude values were recorded by the Typhoon controller, while the data from the sinusoidal waveform were recorder by OPAL-RT. 

Thie dataset of the SUC2/S3 examines the operation of a wide area protection scheme which receives data sent from PMUs when a combined MITM with DoS cyber-attack is conducted, as actual attack, in the isolated communication network of the sandboxing environment, disrupting the C37.118 UDP communication exchanged between OPAL-RT 5707, where the digital twin of IEEE 9-bus system was implemented, and Typhoon controller. More details about this scenario associated to this dataset can be found in Section 1.3.3 of the supporting document of SUC2.

This dataset includes electrical measurements of current’s flow magnitude of the transmission line between buses 7 and 8 of the digital twin of the IEEE 9-bus system. The dataset was recorded by the Typhoon controller, and it is provided in the form of time-series measurements available as MATLAB (.mat) and CSV files which were recorded with a 30-second and 40-second time resolution, respectively. In addition, the dataset includes network traffic packets captured as .pcapng  and .csv files.