Efficient restoration of the electric grid from significant disruptions – both natural and manmade – that lead to the grid entering a failed state is essential to maintaining resilience under a wide range of threats. Restoration follows a set of black start plans, allowing operators to select among these plans to meet the constraints imposed on the system by the disruption. Restoration objectives aim to restore power to a maximum number of customers in the shortest time. Current state-of-the-art for restoration modeling breaks the problem into multiple parts, assuming a known network state and full observability and control by grid operators. These assumptions are not guaranteed under some threats. This paper focuses on a novel integration of modeling and analysis capabilities to aid operators during restoration activities. A power flow-informed restoration framework, comprised of a restoration mixed-integer program informed by power flow models to identify restoration alternatives, interacts with a dynamic representation of the grid through a cognitive model of operator decision-making, to identify and prove an optimal restoration path. Application of this integrated approach is illustrated on exemplar systems. Validation of the restoration is performed for one of these exemplars using commercial solvers, and comparison is made between the steps and time involved in the commercial solver, and that required by the restoration optimization in and of itself, and by the operator model in acting on the restoration optimization output. Publications and proposals developed under this work, along with a path forward for additional expansion of the work, and summary of what was achieved, are also documented.
Network segmentation of a power grid's communication system can make the grid more resilient to cyberattacks. Here we develop a novel trilevel programming model to optimally segment a grid communication system, taking into account the actions of an information technology (IT) administrator, attacker, and grid operator. The IT administrator is allowed to segment existing networks, and the attacker is given a budget to inflict damage on the grid by attacking the segmented communication system. Finally, the grid operator can redispatch the grid after the attack to minimize damage. The resulting problem is a trilevel interdiction problem that we solve using a branch and bound algorithm for bilevel problems. We demonstrate the benefits of optimal network segmentation through case studies on the 9-bus Western System Coordinating Council (WSCC) system and the 30-bus IEEE system. These examples illustrate that network segmentation can significantly reduce the threat posed by a cyberattacker.
Optimal mitigation planning for highly disruptive contingencies to a transmission-level power system requires optimization with dynamic power system constraints, due to the key role of dynamics in system stability to major perturbations. We formulate a generalized disjunctive program to determine optimal grid component hardening choices for protecting against major failures, with differential algebraic constraints representing system dynamics (specifically, differential equations representing generator and load behavior and algebraic equations representing instantaneous power balance over the transmission system). We optionally allow stochastic optimal pre-positioning across all considered failure scenarios, and optimal emergency control within each scenario. This novel formulation allows, for the first time, analyzing the resilience interdependencies of mitigation planning, preventive control, and emergency control. Using all three strategies in concert is particularly effective at maintaining robust power system operation under severe contingencies, as we demonstrate on the Western System Coordinating Council (WSCC) 9-bus test system using synthetic multi-device outage scenarios. Towards integrating our modeling framework with real threats and more realistic power systems, we explore applying hybrid dynamics to power systems. Our work is applied to basic RL circuits with the ultimate goal of using the methodology to model protective tripping schemes in the grid. Finally, we survey mitigation techniques for HEMP threats and describe a GIS application developed to create threat scenarios in a grid with geographic detail.
In the face of increasing natural disasters and an aging grid, utilities need to optimally choose investments to the existing infrastructure to promote resiliency. This paper presents a new investment decision optimization model to minimize unserved load over the recovery time and improve grid resilience to extreme weather event scenarios. Our optimization model includes a network power flow model which decides generator status and generator dispatch, optimal transmission switching (OTS) during the multi-time period recovery process, and an investment decision model subject to a given budget. Investment decisions include the hardening of transmission lines, generators, and substations. Our model uses a second order cone programming (SOCP) relaxation of the AC power flow model and is compared to the classic DC power flow approximation. A case study is provided on the 73-bus RTS-GMLC test system for various investment budgets and multiple hurricane scenarios to highlight the difference in optimal investment decisions between the SOCP model and the DC model, and demonstrate the advantages of OTS in resiliency settings. Results indicate that the network models yield different optimal investments, unit commitment, and OTS decisions, and an AC feasibility study indicates our SOCP resiliency model is more accurate than the DC model.
This report summarizes the activities performed as part of the Science and Engineering of Cybersecurity by Uncertainty quantification and Rigorous Experimentation (SECURE) Grand Challenge LDRD project. We provide an overview of the research done in this project, including work on cyber emulation, uncertainty quantification, and optimization. We present examples of integrated analyses performed on two case studies: a network scanning/detection study and a malware command and control study. We highlight the importance of experimental workflows and list references of papers and presentations developed under this project. We outline lessons learned and suggestions for future work.
This paper presents a novel dynamic programming (DP) technique for the determination of optimal investment decisions to improve power distribution system reliability metrics. This model is designed to select the optimal small-scale investments to protect an electrical distribution system from disruptions. The objective is to minimize distribution system reliability metrics: System Average Interruption Duration Index (SAIDI) and System Average Interruption Frequency Index (SAIFI). The primary input to this optimization model is years of recent utility historical outage data. The DP optimization technique is compared and validated against an equivalent mixed integer linear program (MILP). Through testing on synthetic and real datasets, both approaches are verified to yield equally optimal solutions. Efficiency profiles of each approach indicate that the DP algorithm is more efficient when considering wide budget ranges or a larger outage history, while the MILP model more efficiently handles larger distribution systems. The model is tested with utility data from a distribution system operator in the U.S. Results demonstrate a significant improvement in SAIDI and SAIFI metrics with the optimal small-scale investments.
Severe, wide-area power system emergencies are rare but highly impactful. Such emergencies are likely to move the system well outside normal operating conditions. Appropriate remedial operation plans are unlikely to exist, and visibility into system stability is limited. Inspired by the literature on Transient Stability Constrained Optimal Power Flow and Emergency Control, we propose a stability-incentivized dynamic control optimization formulation. The formulation is designed to safely bring the system to an operating state with better operational and stability margins, reduced transmission line overlimits, and better power quality. Our use case demonstrates proof of concept that coordinated wide-area control has the potential to significantly improve power system state following a severe emergency.
When faced with uncertainty regarding potential failure contingencies, prioritizing system resilience through optimal control of exciter reference voltage and mechanical torque can be arduous due to the scope of potential failure contingencies. Optimal control schemes can be generated through a two-stage stochastic optimization model by anticipating a set of contingencies with associated probabilities of occurrence, followed by the optimal recourse action once the contingency has been realized. The first stage, common across all contingency scenarios, co-optimally positions the grid for the set of possible contingencies. The second stage dynamically assesses the impact of each contingency and allows for emergency control response. By unifying the optimal control scheme prior and post the failure contingency, a singular policy can be constructed to maximize system resilience.
This simple Microgrid Design Toolkit (MDT) use case will provide you an example of performing microgrid sizing by identifying the types and quantities of technology to be purchased for use in a microgrid. It will introduce basic principles of using the MDT microgrid sizing capability by comparing the results of two microgrids in two different markets. Please reference the MDT User Guide (SAND2020-4550) for detailed instructions on how to use the tool.
In this paper we report preliminary results from the novel coupling of cyber-physical emulation and interdiction optimization to better understand the impact of a CrashOverride malware attack on a notional electric system. We conduct cyber experiments where CrashOverride issues commands to remote terminal units (RTUs) that are controlling substations within a power control area. We identify worst-case loss of load outcomes with cyber interdiction optimization; the proposed approach is a bilevel formulation that incorporates RTU mappings to controllable loads, transmission lines, and generators in the upper-level (attacker model), and a DC optimal power flow (DCOPF) in the lower-level (defender model). Overall, our preliminary results indicate that the interdiction optimization can guide the design of experiments instead of performing a 'full factorial' approach. Likewise, for systems where there are important dependencies between SCADA/ICS controls and power grid operations, the cyber-physical emulations should drive improved parameterization and surrogate models that are applied in scalable optimization techniques.
Utilizing historical utility outage data, an approach is presented to optimize investments which maximize reliability, i.e., minimize System Average Interruption Duration Index (SAIDI) and System Average Interruption Frequency Index (SAIFI) metrics. This method is designed for distribution system operators (DSOs) to improve reliability through small investments. This approach is not appropriate for large system planning and investments (e.g. new transmission lines or generation) since further economic and stability concerns are required for this type of analysis. The first step in the reliability investment optimization is to create synthetic outage data sets for a future year based on probability density functions of historical utility outage data. Once several (likely hundreds of) future year outage scenarios are created, an optimization model is used to minimize the synthetic outage SAIDI and SAIFI norm (other metrics could also be used). The results from this method can be used for reliability system planning purposes and can inform DSOs which investments to pursue to improve their reliability metrics.
Power system utilities continue to strive for increased system resiliency. However, quantifying a baseline system resilience, and deciding the optimal investments to improve their resilience is challenging. This paper discusses a method to create scenarios, based on historical data, that represent the threats of severe weather events, their probability of occurrence, and the system wide consequences they generate. This paper also presents a mixed-integer stochastic nonlinear optimization model which uses the scenarios as an input to determine the optimal investments to reduce the system impacts from those scenarios. The optimization model utilizes a DC power flow to determine the loss of load during an event. Loss of load is the consequence that is minimized in this optimization model as the objective function. The results shown in this paper are from the IEEE RTS-96 three area reliability model. The scenario generation and optimization model have also been utilized on full utility models, but those results cannot be published.
This document provides implementation guidance for implementing personnel group FTE costs by JCA Tier 1 or 2 categories in the Contingency Contractor Optimization Tool – Engineering Prototype (CCOT-P). CCOT-P currently only allows FTE costs by personnel group to differ by mission. Changes will need to be made to the user interface inputs pages and the database
This report summarizes the work performed as part of a Laboratory Directed Research and Development project focused on evaluating and mitigating risk associated with biological dual use research of concern. The academic and scientific community has identified the funding stage as the appropriate place to intervene and mitigate risk, so the framework developed here uses a portfolio-level approach and balances biosafety and biosecurity risks, anticipated project benefits, and available mitigations to identify the best available investment strategies subject to cost constraints. The modeling toolkit was designed for decision analysis for dual use research of concern, but is flexible enough to support a wide variety of portfolio-level funding decisions where risk/benefit tradeoffs are involved. Two mathematical optimization models with two solution methods are included to accommodate stakeholders with varying levels of certainty about priorities between metrics. An example case study is presented.
The Microgrid Design Toolkit (MDT) is a decision support software tool for microgrid designers to use during the microgrid design process. The models that support the two main capabilities in MDT are described. The first capability, the Microgrid Sizing Capability (MSC), is used to determine the size and composition of a new microgrid in the early stages of the design process. MSC is a mixed-integer linear program that is focused on developing a microgrid that is economically viable when connected to the grid. The second capability is focused on refining a microgrid design for operation in islanded mode. This second capability relies on two models: the Technology Management Optimization (TMO) model and Performance Reliability Model (PRM). TMO uses a genetic algorithm to create and refine a collection of candidate microgrid designs. It uses PRM, a simulation based reliability model, to assess the performance of these designs. TMO produces a collection of microgrid designs that perform well with respect to one or more performance metrics.