Wind Turbine Control Cyberattack Detection With Ensemble Models
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of wind turbine control systems and stochastic operation conditions make it challenging to detect and isolate cyberattacks effectively, as existing detection models are overly complex and difficult to train with available sensors.
Innovation Solution
A method and system using an ensemble of classification models, including machine learning algorithms like decision stumps and convolutional neural networks, to receive and analyze time series data from monitoring nodes, extract features, and determine cyberattack probabilities through a decision fusion module, implementing control actions when thresholds are exceeded.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single detection model is used for the entire turbine unit, then the system structure is simplified, but the detection model becomes overwhelmingly complex and difficult to train
Solution Approach 1:
The patent divides the wind turbine control system into multiple subsystems (pitch control, torque control, yaw control, etc.), each monitored by a dedicated detection model. This segmentation allows each model to focus on specific subsystem characteristics, reducing individual model complexity while maintaining comprehensive coverage of the entire turbine system.
2Measurement precision
If multiple detection models are used for different subsystems, then detection precision is improved, but the overall system complexity increases
Solution Approach 1:
The patent combines multiple subsystem-level detection models into a unified ensemble framework that integrates their outputs. This merging approach maintains the precision benefits of specialized models while providing a consolidated detection system that manages complexity through structured integration and shared infrastructure.
Solution Approach 2:
The patent introduces an ensemble dimension that combines predictions from multiple subsystem models. By adding this hierarchical dimension (subsystem level + ensemble level), the system achieves high detection precision through specialized models while managing overall complexity through the structured ensemble framework.
3Reliability
If comprehensive monitoring of all subsystems is implemented, then cyberattack isolation capability is improved, but the number of sensors and processing requirements increase
Solution Approach 1:
The patent extracts and monitors only the critical control signals and parameters from each subsystem that are most indicative of cyberattacks. By selecting and focusing on key variables (such as control command deviations, actuator response anomalies), the system achieves comprehensive subsystem isolation capability without requiring exhaustive monitoring of all sensors.
Data Source
AI summary
A method for detecting a cyberattack on a control system of a wind turbine includes providing a plurality of classification models of the control system. The method also includes receiving, via each of the plurality of classification models, a time series of operating data from one or more monitoring nodes of the wind turbine. The method further includes extracting, via the plurality of classification models, a plurality of features using the time series of operating data. Each of the plurality of features is a mathematical characterization of the time series of operating data. Moreover, the method includes generating an output from each of the plurality of classification models and determining, using a decision fusion module, a probability of the cyberattack occurring on the control system based on a combination of the outputs. Thus, the method includes implementing a control action when the probability exceeds a probability threshold.