A Bouncer That Reads the Room: Context-Aware Authorization Catches Credentialed DER Attacks

Grid cybersecurity paper adds situational awareness to DER command authorization, catching 91.7% of insider-abuse writes that credential-based checks miss entirely.

You know how a good bartender doesn't just check your ID — they notice when you're ordering your eighth drink in twenty minutes and cut you off? That's the core mechanism here. Current distributed energy resource (DER) authorization systems check credentials and whether a command value has been seen before — the equivalent of checking your ID and looking at the menu. An attacker with a stolen credential who writes plausible-looking values sails right through. This paper builds the bartender who counts your drinks. The committed claim: a context-aware authorization layer that judges each DER write against grid operating context — bus voltages around the target, time of day, day-ahead price, system load, and irradiance — compared against what operators wrote under similar conditions in the feeder's own benign history. It's a behavioral anomaly detector, but scoped specifically to the physics and economics of grid operation rather than generic network traffic patterns. The method is evaluated live on IEEE 123-bus and 8500-node feeders driven by a full measured 2024 year of price, load, and irradiance data across nine attack scenarios. The numbers tell a clear story about where existing defenses fail. A lookup table trained on the same benign history catches zero percent of writes in four scenarios where attackers send values already familiar to the targeted device. The context check refuses 91.7% of insider-abuse writes and 64.4% of DER-aggregation writes while denying only 1.28% of benign writes — a false-positive rate low enough to be operationally tolerable. The lookup and context check are positioned as complements, not replacements. The harder test is more revealing. In an offline replay using curtailment setpoints drawn from the benign range and issued at a positive price — the most adversarially clever scenario, where every value looks individually legitimate — the context check refuses 47.3% and 50.5% on the two feeders, against 18.5% and 16.0% for the same check without context. That's roughly a 3× improvement, but it also means half the adversarial commands still get through. The live test was limited: the few setpoints tested were mostly shallow and were mostly allowed. The paper is honest about this gap. Architecturally, this is a history-conditioned decision boundary approach: take the feature vector of current grid state, find the nearest neighbors in the benign operator history, and flag writes that fall outside the envelope of what operators did in similar conditions. The algorithmic family is nearest-neighbor / lookup-based anomaly detection, not a deep learning model — it leans on the structure of grid physics and economic signals rather than learned representations. This is a deliberate design choice: interpretability and auditability matter in grid security contexts where operators need to understand why a command was blocked. The integrity regime is stronger than typical cybersecurity papers. The evaluation uses standard IEEE test feeders (123-bus and 8500-node), a full calendar year of real measured exogenous data, and nine distinct attack scenarios rather than a single contrived one. The weakness is that it's still the same team simulating both the attacks and the defense — no red team, no adversarial robustness test against an attacker who knows the context check exists and specifically crafts commands to evade it. The offline-vs-live gap is acknowledged but not fully explored. The successor question is obvious: what happens when the attacker adapts? An adversary who knows the context check exists could probe the boundary of 'normal' commands under specific grid conditions and craft writes that are anomalous in intent but statistically indistinguishable from benign history. The paper doesn't run this adaptive adversary experiment. My read: this is likely (a) scope limitation for a single paper, not evasion — the contribution is establishing that context helps at all, not proving it's robust to every attack model. The next concrete milestone is demonstrating robustness against an adaptive adversary on a real utility SCADA system, not just IEEE test feeders.