Table 9 Details of G36-Cyber fault scenarios.

From: Labeled Datasets for Air Handling Units Operating in Faulted and Fault-free States

Fault type

Fault intensity

Duration*

Method of fault imposition

Data-intrusion attack

Temperature reset request

15 temperature reset request

12 p.m. to 3 p.m. on one shoulder season day (with the next 2 hours as the post-attack period).

Corrupting the number of transmitted zone temperature reset requests to 15 for five thermal zones (maximum allowed in G36) using the Max temporal model:

\(\hat{y}(t)=\left\{\begin{array}{c}y(t),{t}\notin A\\ {y}_{\max },{t}\in A\end{array}\right.\)

where \(\hat{y}\) is the corrupted property value, y is the original value, and A is the threat period

Chiller on/off

Chiller cycles on/off every 30 minutes

12 p.m. to 3 p.m. on one cooling season day (with 3 p.m. to 7 p.m. as the post-attack period).

Using square pulse model with a period of one hour on chiller on/off control signal:

\(\hat{y}(t)=\left\{\begin{array}{c}y(t),{t}\notin A\\ {f}_{p}(t),{t}\in {A\; and\; c}\in [{y}_{\min },{y}_{\max }]\\ {y}_{\min },{t}\in {A\; and\; c} < {y}_{\min }\\ {y}_{\max },{t}\in {A\; and\; c} > {y}_{\max }\end{array}\right.\)

Supply air fan speed at max value

speed set to 100%

7 a.m. to 7 p.m. on one cooling season day.

Using the max temporal model.

Zone temperature cooling setpoint to constant 22 \(^\circ C\)

1 p.m. to 3 p.m. on one cooling season day (with the next 2 hours as the post attack period).

Using the constant temporal model, where property value was overwritten to a user-defined constant value \(c\) during the threat:

\(\hat{y}\left(t\right)=\left\{\begin{array}{c}y\left(t\right),t\notin A\\ c,t\in {A\; and\; c}\in [{y}_{\min },\,{y}_{\max }]\\ {y}_{\min },{t}\in {A\; and\; c} < {y}_{\min }\\ {y}_{\max },{t}\in {A\; and\; c} > {y}_{\max }\end{array}\right.\)

DoS attack

Blocking chilled water setpoint

The CHWS temperature was continuously reset from a minimum value of 5 \(^\circ C\) to a maximum value of 10 ◦C.

12 p.m. to 6 p.m. on one cooling season day (6 p.m. to 7 p.m. as the post-attack period).

Blocking the chiller from receiving its setpoints to use values from the previous time step, by implementing the blocking temporal model:

\(\hat{y}(t)=\left\{\begin{array}{c}y(t),{t}\notin A\\ y(t-1),{t}\in A\end{array}\right.\)

Delaying chilled water setpoint

Fixed 10-minute delay in communication network

12 p.m. to 6 p.m. on one cooling season day.

Transmitted signal was delayed to the receivers by the delaying model:

\(\hat{y}(t)=\left\{\begin{array}{c}y(t),{t}\notin A\\ y(t-\triangle t),{t}\in A\end{array}\right.\)

  1. Fault injection times varied in each case (data sampling rate: 5-minute; location: Chicago, IL, USA).
  2. *In this column, the cooling season day corresponds to the 207th day of the year (July 26th), while the shoulder season day corresponds to the 83rd day of the year (March 23rd).