Cyber-Flexible Security Services for Resilient Operation of Renewable-Rich Power Systems

The digitalisation of power systems introduces substantial vulnerabilities, particularly concerning system stability and security, due to the growing risk of malicious cyber attacks. These threats, often enabled by the proliferation of Internet of Things assets, can target critical infrastructure by manipulating system load or altering renewable power generation, both of which directly affect the system security margin. This paper proposes a novel cyber-resilient optimisation strategy (CROS) framework to enhance cyber-resilience in power systems, particularly under conditions of high renewable power penetration. The framework explicitly accounts for the interplay between cyber and physical components and addresses how adversarial interventions can impact load and renewable generation inputs. Central to this approach is a cyber-conscious strategy (CCS) which intends to increase the cyber-resilience radius in the face of unknown cyber attacks without any information about the intention and characteristics of attacks. By embedding the cyber-flexible security service (CFSS), the framework supports real-time corrective actions, allowing operators to adapt flexibly to evolving cyber-threat scenarios. The CFSS defines a dynamic security margin, reflecting the system's ability to maintain system security under unknown cyber threats. The proposed multi-stage, bi-level co-optimisation model integrates a cost-risk analysis to guide techno-economic decision-making, empowering operators with a proactive and adaptive operational strategy to mitigate the impact of cyber incidents on modern, renewables-rich power systems.