Vulnerability of Building Energy Management against Targeted False Data Injection Attacks:Model Predictive Control vs. Proportional Integral

TL;DR

This work investigates the vulnerability of building energy management to targeted false data injection attacks by comparing Proportional-Integral (PI) and nonlinear Model Predictive Control (NMPC) within a five-room HVAC model. Using an RC-based building representation and a calibrated FDIA model with attack bounds on temperature readings, the study shows NMPC generally achieves better normal-operation performance and energy efficiency, but can incur larger reductions in heat-pump lifespan under attack, whereas PI offers greater valve protection at the expense of pump wear. The findings highlight a tradeoff between system efficiency and asset lifetimes under cyber threats, emphasizing the need for robust, attack-resilient BMS designs and control strategies that balance performance with longevity in the presence of adversarial actions.

Abstract

Cybersecurity in building energy management is crucial for protecting infrastructure, ensuring data integrity, and preventing unauthorized access or manipulation. This paper investigates the energy efficiency and cybersecurity of building energy management systems (BMS) against false data injection (FDI) attacks using proportional-integral (PI) and model predictive control (MPC) methods. Focusing on a commercial building model with five rooms, vulnerability of PI-based BMS and nonlinear MPC-based BMS against FDIs on sensors and actuators is studied. The study aims to assess the effectiveness of these control strategies in maintaining system performance and lifespan, highlighting the potential of MPC in enhancing system resilience against cyber threats. Our case studies demonstrate that even a short term FDIA can cause a 12% reduction in lifetime of a heat-pump under an MPC controller, and cause a near thirty-fold overuse of flow valves under a PI controller.

Figures (7)

• Figure 1: Building and PI control diagram
• Figure 2: Building and MPC control diagram
• Figure 3: RC Building Model
• Figure 4: Obtained FDI attack for south room temperature sensor with MPC and PI controllers.
• Figure 5: Comparative analysis of PI and MPC Controllers.