Browsing by Author "Zhou, Ming"

Now showing 1 - 2 of 2
  • Thumbnail Image
    Advanced System Monitoring with Phasor Measurements
    Zhou, Ming (Virginia Tech, 2008-05-19)
    Phasor Measurement Units (PMUs) are widely acknowledged as one of the most promising developments in the field of real-time monitoring of power systems. By aligning the time stamps of voltage and current phasor measurements that are consistent with Coordinated Universal Time (UTC), a coherent picture of the power system state can be achieved through either direct measurements or simple linear calculations. With the growing number of PMUs planned for installation in the near future, both utilities and research institutions are looking for the best solutions to the placement of units as well as to the applications that make the most of phasor measurements. This dissertation explores a method for optimal PMU placement as well as two applications of synchronized phasor measurements in state estimation. The pre-processing PMU placement method prepares the system data for placement optimization and reduces the size of the optimization problem. It is adaptive to most of the optimal placement methods and can save a large amount of computational effort. Depth of un-observability is one of the criteria to allow the most benefit out of a staged placement of the units. PMUs installed in the system provide synchronized phasor measurements that are highly beneficial to power system state estimations. Two related applications are proposed in the dissertation. First, a post-processing inclusion of phasor measurements in state estimators is introduced. This method avoids the revision of the existing estimators and is able to realize similar results as mixing phasor data with traditional SCADA with a linear afterwards step. The second application is a method to calibrate instrument transformers remotely using phasor measurements. Several scans of phasor measurements are used to accomplish estimating system states in conjunction with complex instrument transformer correction factors. Numerical simulation results are provided for evaluation of the calibration performance with respect to the number of scans and load conditions. Conducting theoretical and numerical analysis, the methods and algorithms developed in this dissertation are aimed to strategically place PMUs and to incorporate phasor measurements into state estimators effectively and extensively for better system state monitoring. Simulation results show that the proposed placement method facilitates approaching the exact optimal placement while keep the computational effort low. Simulation also shows that the use of phasor measurement with the proposed instrument transformer correction factors and proposed state estimation enhancement largely improves the quality of state estimations.
  • Thumbnail Image
    Save the Bruised Striver: A Reliable Live Patching Framework for Protecting Real-World PLCs
    Zhou, Ming; Wang, Haining; Li, Ke; Zhu, Hongsong; Sun, Limin (ACM, 2024-04-22)
    Industrial Control Systems (ICS), particularly programmable logic controllers (PLCs) responsible for managing underlying physical infrastructures, often operate for extended periods without interruption. Thus, it is challenging to patch security vulnerabilities of ICS in a timely manner after disclosure because it often necessitates waiting for a rare downtime window. While live patching has been introduced to avoid downtime and maintenance costs, conventional live patching methods are not viable for closed-source PLCs. Without the source code, it is difficult to understand the system behaviors and determine binary patch equivalence. To address these challenges, we present a Reliable Live Patching framework called RLPatch for applying live patches to third-party binary without source code.We design RLPatch to capture real-time conditions and dynamic behaviors of PLCs, which enables DevOps engineers to identify major non-recoverable fault (MNRF) vulnerabilities and generate hot patches. The core of RLPatch is an update agent that inserts breakpoints over the original MNRF code and then directs execution to the patches. To ensure system reliability, we use the unique constraints of PLCs to integrate the update processes with the scan cycle. We leverage RLPatch to patch 20 real vulnerabilities in three widely used Rockwell PLCs. We evaluate RLPatch in a real-world gas pipeline, demonstrating its reliability and effectiveness in practice.