Fully distributed security control for wind farms subject to hybrid cyberattacks

Modern wind farms (WFs) increasingly integrate information technologies with wind power generation, which introduces new cyber-physical vulnerabilities. As the penetration of wind power in power systems continues to increase, secure communication and stable operation of WFs become increasingly important. However, coordinated control of WFs under hybrid false data injection (FDI) and denial-of-service (DoS) attacks remains insufficiently addressed. To fill this gap, this paper develops a fully distributed security control strategy for cyber-physical WFs under hybrid cyberattacks. A six-degree-of-freedom (6-DOF) wind turbine (WT) model is integrated with a WF communication network model to characterize the effects of FDI and DoS attacks on active power tracking and fair load sharing. A distributed security control strategy based on an auxiliary layer is then designed to track grid-side active power demand while preserving fair load sharing. Lyapunov stability analysis establishes closed-loop convergence under nominal and admissible DoS conditions and characterizes the recovery error under FDI attacks, thereby clarifying how control gains and network structure affect resilience. Case studies on a grid-connected WF demonstrate that the proposed strategy maintains active power tracking and fair load sharing under FDI, DoS, and hybrid attack scenarios.