How weaponizing disinformation can bring down a city's power grid Gururaghav Ramana, Bedoor AlSheblib,y, Marcin Waniekb,y, Talal Rahwanb,*, and Jimmy Chih-Hsien Penga,* aDepartment of Electrical and Computer Engineering, National University of Singapore, Singapore bComputer Science, New York University, Abu Dhabi, United Arab Emirates * Joint corresponding authors. E-mail:
[email protected];
[email protected] yEqually contributing authors Abstract Social technologies have made it possible to propagate disinformation and manipulate the masses at an unprecedented scale. This is particularly alarming from a security perspective, as humans have proven to be the weakest link when protecting critical infrastructure in general, and the power grid in particular. Here, we consider an attack in which an adver- sary attempts to manipulate the behavior of energy consumers by sending fake discount notifications encouraging them to shift their consumption into the peak-demand period. We conduct surveys to assess the propen- sity of people to follow-through on such notifications and forward them to their friends. This allows us to model how the disinformation propagates through social networks. Finally, using Greater London as a case study, we show that disinformation can indeed be used to orchestrate an attack wherein unwitting consumers synchronize their energy-usage patterns, re- sulting in blackouts on a city-scale. These findings demonstrate that in an era when disinformation can be weaponized, system vulnerabilities arise arXiv:1908.02589v1 [cs.SI] 1 Aug 2019 not only from the hardware and software of critical infrastructure, but also from the behavior of the consumers. Introduction Social technologies have dramatically altered the ways in which conflicts are fought.