pith. sign in

arxiv: 2605.24725 · v1 · pith:LYMWDLLBnew · submitted 2026-05-23 · 📡 eess.SY · cs.SY

Differentially Private Obfuscation of Power Grid Dynamics

Pith reviewed 2026-06-30 12:42 UTC · model grok-4.3

classification 📡 eess.SY cs.SY
keywords differential privacypower grid dynamicsmodel synthesisparameter obfuscationIEEE 30-bus systemfrequency dynamicsprivacy-fidelity trade-off
0
0 comments X

The pith

An algorithm adds noise to power grid parameters for differential privacy then optimizes the result to match original dynamics.

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The paper develops an algorithm that synthesizes dynamic models of power grids while protecting sensitive parameters such as transmission, generation, and load values. It first perturbs the original parameters with noise calibrated to differential privacy, then applies optimization to the perturbed values so that the model's response to disturbances remains statistically consistent with observations from the source grid. The method is demonstrated on the frequency dynamics of the IEEE 30-bus system. A sympathetic reader would care because real-world dynamic models are needed for blackout and disturbance analysis yet cannot be released directly due to privacy and cybersecurity risks. The work shows both the existence of a privacy-fidelity trade-off and that the post-noise optimization step recovers substantial accuracy.

Core claim

The algorithm applies privacy-preserving noise to obfuscate the original grid parameters, but then optimizes the perturbed parameters to ensure that the resulting model dynamics are statistically consistent with those observed in the source grid. Application to the frequency dynamics of the IEEE 30-bus system reveals the inherent privacy-fidelity trade-off: stricter privacy requirements degrade modeling fidelity, yet optimization significantly improves the quality of the synthesized models.

What carries the argument

Two-step procedure of differential-privacy noise injection on grid parameters followed by post-perturbation optimization that restores dynamic fidelity.

If this is right

  • Stricter privacy budgets produce lower-fidelity synthetic models of grid frequency dynamics.
  • The optimization step recovers measurable accuracy even under tighter privacy constraints.
  • Synthetic models can be shared for disturbance analysis without exposing the source grid's transmission, generation, or load parameters.
  • The approach is demonstrated on the IEEE 30-bus test system and directly quantifies the privacy-fidelity curve.

Where Pith is reading between the lines

These are editorial extensions of the paper, not claims the author makes directly.

  • The same noise-plus-optimization pattern could be tested on voltage or transient stability models beyond frequency dynamics.
  • If the privacy guarantee survives the optimization, the method might apply to other networked infrastructure such as gas or water systems.
  • Utilities could use the reported trade-off curve to decide acceptable privacy levels when releasing planning models.
  • Scaling experiments on larger test systems would show whether the optimization remains tractable as the number of parameters grows.

Load-bearing premise

Post-noise optimization of parameters can restore statistical consistency with the source grid dynamics while still satisfying the differential privacy guarantee on the original parameters.

What would settle it

A direct check whether the optimization step causes the released model to violate the original differential privacy bound on the parameters, or whether the optimized dynamics deviate from the source grid's observed frequency response by more than the statistical tolerance reported in the IEEE 30-bus experiments.

Figures

Figures reproduced from arXiv: 2605.24725 by Shengyang Wu, Vladimir Dvorkin.

Figure 1
Figure 1. Figure 1: Kron reduction of a 5-bus network. Bus 5 is the interior node. [PITH_FULL_IMAGE:figures/full_fig_p003_1.png] view at source ↗
Figure 2
Figure 2. Figure 2: The full IEEE 30-bus system [PITH_FULL_IMAGE:figures/full_fig_p006_2.png] view at source ↗
Figure 3
Figure 3. Figure 3: Kron-reduced IEEE 30-bus system appears at stronger privacy requirements (smaller ε), as Step 1 injects more noise into the source parameters. In all cases, however, the mismatch is reduced to nearly zero within 100 iterations, confirming fidelity recovery across privacy levels. The fidelity of the synthesized models is measured by the average trajectory mismatch over 10 random transients: Llap = 1 10 X 10… view at source ↗
Figure 4
Figure 4. Figure 4: Trajectory mismatch R T 0 ∥Hx(t) − ωˆ (t)∥ 2 2 dt over gradient descent iterations for 100 runs of Alg. 1 under three privacy levels ε ∈ {0.5, 1, 2} [PITH_FULL_IMAGE:figures/full_fig_p007_4.png] view at source ↗
Figure 5
Figure 5. Figure 5: Distribution of Llap (yellow) and Lpp (blue) across 100 synthetic models and 10 randomly generated transients, under three privacy levels ε ∈ {0.5, 1, 2}. Shaded areas show the 80% intervals; dotted lines show the mean. ε increases (privacy requirement relaxes), both Llap and Lpp further decrease, confirming the privacy-fidelity trade-off [PITH_FULL_IMAGE:figures/full_fig_p007_5.png] view at source ↗
Figure 6
Figure 6. Figure 6: Frequency trajectories of 100 synthetic models at ε = 0.5 across five out-of-sample transients, all starting at t = 10 s: transient 1, uniform 5% load increase at all nodes (0.15 p.u. total); transient 2, load increase of 0.2 p.u. at nodes 3 and 4; transient 3, load increase of 0.2 p.u. at nodes 5 and 20; transient 4, full load loss at nodes 10 and 30 (0.17 p.u. total); transient 5, load addition of 0.5 p.… view at source ↗
Figure 7
Figure 7. Figure 7: Distributions of power flow sensitivities [PITH_FULL_IMAGE:figures/full_fig_p008_7.png] view at source ↗
Figure 9
Figure 9. Figure 9: Distributions of generator damping D˜ 0 γ (yellow, Laplace perturbation only) and D˜ γ (blue, post-processed) across 100 samples, under three privacy levels ε ∈ {0.5, 1, 2}. Green dots indicate the true damping Dγ. REFERENCES [1] S. Geng and I. A. Hiskens, “Unified grid-forming/following inverter control,” IEEE Open Access J. Power Energy, vol. 9, pp. 489–500, 2022. [2] B. K. Poolla, D. Groß, and F. Dorfle… view at source ↗
read the original abstract

Dynamic models of power systems are critical for analyzing grid response to disturbances and blackouts, but the release of real-world dynamic models is hindered by privacy and cybersecurity concerns, as such models carry sensitive information about transmission, generation, and load parameters. We develop an algorithm for synthesizing dynamic grid models from real-world power grids balancing two objectives: the privacy of the source grid, quantitatively measured using the notion of differential privacy, and the fidelity of the synthesized model. The algorithm applies privacy-preserving noise to obfuscate the original grid parameters, but then optimizes the perturbed parameters to ensure that the resulting model dynamics are statistically consistent with those observed in the source grid. Application to the frequency dynamics of the IEEE 30-bus system reveals the inherent privacy-fidelity trade-off: stricter privacy requirements degrade modeling fidelity, yet optimization significantly improves the quality of the synthesized models.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, simulated authors' rebuttal, and a circularity audit. Tearing a paper down is the easy half of reading it; the pith above is the substance, this is the friction.

Referee Report

2 major / 2 minor

Summary. The paper proposes a two-stage algorithm for synthesizing differentially private dynamic models of power grids. Calibrated noise is first added to the original parameters (e.g., inertia, damping, and line reactances) to satisfy (ε,δ)-differential privacy; the noisy parameters are then optimized so that the simulated frequency dynamics match empirical statistics (e.g., variance or autocorrelation) observed from the source grid. The method is applied to the frequency dynamics of the IEEE 30-bus system, where results illustrate the expected privacy-fidelity trade-off and claim that the post-optimization step materially improves model quality while the final model remains differentially private with respect to the original parameters.

Significance. If the differential privacy guarantee survives the optimization step, the work would provide a practical route to releasing dynamic models that retain statistical fidelity for stability and disturbance studies while protecting sensitive transmission and generation data. The explicit quantitative trade-off on a standard test case supplies a reproducible baseline that subsequent privacy-preserving modeling efforts could build upon.

major comments (2)
  1. [Algorithm description (likely §3 or §4)] Algorithm description (likely §3 or §4): the manuscript states that the final synthesized model satisfies the original (ε,δ) guarantee on the source-grid parameters, yet supplies no composition theorem, sensitivity analysis, or privacy-budget accounting for the second-stage optimization. Because the optimization loss compares simulated trajectories to measured frequency statistics drawn from the private source data, the post-processing step is not a priori DP-preserving; without an explicit argument that the optimization is either data-independent or itself (ε',δ')-DP with ε' folded into the total budget, the central privacy claim is unsupported.
  2. [Experimental section on IEEE 30-bus results] Experimental section on IEEE 30-bus results: the reported improvement in modeling fidelity after optimization is presented only qualitatively or via visual trajectory overlays; no quantitative metrics (e.g., mean-squared error on frequency nadir, Kullback-Leibler divergence on empirical distributions, or cross-validation error) are given, nor is any statistical test reported to establish that the improvement is significant relative to the added noise level. This weakens the claim that optimization "significantly improves" quality under privacy constraints.
minor comments (2)
  1. Notation for the privacy parameters (ε,δ) and the noise scale should be introduced once with explicit dependence on the sensitivity of the parameter vector; subsequent uses are occasionally ambiguous.
  2. The abstract and introduction both refer to "statistically consistent" dynamics without defining the precise statistic (e.g., power spectral density, moment matching) used in the loss; a short clarifying sentence would improve readability.

Simulated Author's Rebuttal

2 responses · 0 unresolved

We thank the referee for the thorough review and for identifying these two key areas where the manuscript requires clarification and strengthening. We address each major comment below and will revise the manuscript to incorporate the suggested improvements.

read point-by-point responses
  1. Referee: [Algorithm description (likely §3 or §4)] Algorithm description (likely §3 or §4): the manuscript states that the final synthesized model satisfies the original (ε,δ) guarantee on the source-grid parameters, yet supplies no composition theorem, sensitivity analysis, or privacy-budget accounting for the second-stage optimization. Because the optimization loss compares simulated trajectories to measured frequency statistics drawn from the private source data, the post-processing step is not a priori DP-preserving; without an explicit argument that the optimization is either data-independent or itself (ε',δ')-DP with ε' folded into the total budget, the central privacy claim is unsupported.

    Authors: We agree that the current manuscript does not supply an explicit composition theorem or sensitivity analysis for the optimization stage. The referee correctly notes that the loss function depends on frequency statistics from the source data. In the revised version we will add a dedicated subsection (likely in §3) that provides (i) a formal statement of the overall mechanism as the composition of the initial noise addition and the subsequent optimization, (ii) a sensitivity bound for the optimization step with respect to the source statistics, and (iii) the resulting total (ε,δ) budget. If the statistics must themselves be treated as private, we will either make them differentially private or fold an additional privacy cost into the accounting; the revised text will make this choice explicit. revision: yes

  2. Referee: [Experimental section on IEEE 30-bus results] Experimental section on IEEE 30-bus results: the reported improvement in modeling fidelity after optimization is presented only qualitatively or via visual trajectory overlays; no quantitative metrics (e.g., mean-squared error on frequency nadir, Kullback-Leibler divergence on empirical distributions, or cross-validation error) are given, nor is any statistical test reported to establish that the improvement is significant relative to the added noise level. This weakens the claim that optimization "significantly improves" quality under privacy constraints.

    Authors: We accept that the experimental claims rest primarily on visual inspection. The revised manuscript will augment the IEEE 30-bus results with quantitative metrics: mean-squared error on frequency nadir and settling time, Kullback-Leibler divergence between the empirical distributions of key statistics before and after optimization, and cross-validation error across multiple disturbance scenarios. We will also report the results of paired statistical tests (e.g., Wilcoxon signed-rank) with p-values to establish that the observed improvements are significant relative to the noise level. revision: yes

Circularity Check

0 steps flagged

No circularity; explicit two-stage noise-then-optimize procedure is self-contained

full rationale

The paper describes an algorithm that first applies calibrated noise to grid parameters to achieve differential privacy, followed by a separate optimization step to match observed source-grid dynamics. This matches the reader's assessment of no circular reasoning. No self-definitional definitions, fitted inputs renamed as predictions, load-bearing self-citations, uniqueness theorems imported from authors, ansatz smuggling, or renaming of known results are present in the abstract or described procedure. The derivation chain does not reduce any claimed result to its inputs by construction; the optimization is an independent post-processing stage whose privacy accounting is asserted separately. The method is therefore self-contained against external benchmarks for the purpose of this circularity check.

Axiom & Free-Parameter Ledger

0 free parameters · 2 axioms · 0 invented entities

Review performed on abstract only; no explicit free parameters, axioms, or invented entities are stated in the provided text.

axioms (2)
  • domain assumption Differential privacy supplies a quantifiable bound on information leakage about individual grid parameters
    Standard assumption in privacy-preserving data release literature
  • domain assumption Frequency dynamics of a power grid can be summarized by statistical properties that are comparable across models
    Required for the fidelity objective stated in the abstract

pith-pipeline@v0.9.1-grok · 5668 in / 1268 out tokens · 30381 ms · 2026-06-30T12:42:37.040478+00:00 · methodology

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Reference graph

Works this paper leans on

41 extracted references · 4 canonical work pages · 1 internal anchor

  1. [1]

    Unified grid-forming/following inverter control,

    S. Geng and I. A. Hiskens, “Unified grid-forming/following inverter control,”IEEE Open Access J. Power Energy, vol. 9, pp. 489–500, 2022

  2. [2]

    Placement and implementation of grid-forming and grid-following virtual inertia and fast frequency response,

    B. K. Poolla, D. Groß, and F. D ¨orfler, “Placement and implementation of grid-forming and grid-following virtual inertia and fast frequency response,”IEEE Trans. Power Syst., vol. 34, no. 4, pp. 3035–3046, 2019

  3. [3]

    The unseen AI disruptions for power grids: LLM-induced transients,

    Y . Li, M. Mughees, Y . Chen, and Y . R. Li, “The unseen ai disruptions for power grids: Llm-induced transients,”arXiv preprint arXiv:2409.11416, 2024

  4. [4]

    Connecting automatic generation control and economic dispatch from an optimization view,

    N. Li, C. Zhao, and L. Chen, “Connecting automatic generation control and economic dispatch from an optimization view,”IEEE Transactions on Control of Network Systems, vol. 3, no. 3, pp. 254–264, 2016

  5. [5]

    Optimal load-side control for frequency regulation in smart grids,

    E. Mallada, C. Zhao, and S. Low, “Optimal load-side control for frequency regulation in smart grids,”IEEE Transactions on Automatic Control, vol. 62, no. 12, pp. 6294–6309, 2017

  6. [6]

    Final report on the grid incident in spain and portugal on 28 april 2025,

    ENTSO-E Expert Panel, “Final report on the grid incident in spain and portugal on 28 april 2025,” European Network of Transmission System Operators for Electricity (ENTSO-E), Tech. Rep., 2026

  7. [7]

    Modeling and mitigating impact of false data injection attacks on automatic generation control,

    R. Tanet al., “Modeling and mitigating impact of false data injection attacks on automatic generation control,”IEEE Transactions on Infor- mation Forensics and Security, vol. 12, no. 7, pp. 1609–1624, 2017

  8. [8]

    Integrity data attacks in power market operations,

    L. Xie, Y . Mo, and B. Sinopoli, “Integrity data attacks in power market operations,”IEEE T. Smart Grid, vol. 2, no. 4, pp. 659–666, 2011

  9. [9]

    Kron reduction of graphs with applications to electrical networks,

    F. Dorfler and F. Bullo, “Kron reduction of graphs with applications to electrical networks,”IEEE Transactions on Circuits and Systems I: Regular Papers, vol. 60, no. 1, pp. 150–163, 2012

  10. [10]

    Graph-theoretic analysis of power systems,

    T. Ishizaki, A. Chakrabortty, and J.-I. Imura, “Graph-theoretic analysis of power systems,”Proc. IEEE, vol. 106, no. 5, pp. 931–952, 2018

  11. [11]

    Towards optimal kron-based reduction of networks (opti-kron) for the electric power grid,

    S. Chevalier and M. R. Almassalkhi, “Towards optimal kron-based reduction of networks (opti-kron) for the electric power grid,” in61st Conference on Decision and Control. IEEE, 2022, pp. 5713–5718

  12. [12]

    Optimal Kron-based Reduction of Networks (Opti-KRON) for Three-phase Distribution Feeders

    O. Mokhtari, S. Chevalier, and M. Almassalkhi, “Optimal kron-based reduction of networks (opti-kron) for three-phase distribution feeders,” arXiv preprint arXiv:2510.19608, 2025

  13. [13]

    Reverse kron reduction of three-phase radial network,

    S. H. Low, “Reverse kron reduction of three-phase radial network,” in 2024 IEEE 63rd Conference on Decision and Control (CDC). IEEE, 2024, pp. 4615–4622

  14. [14]

    Reverse kron reduction of multi-phase radial network,

    ——, “Reverse kron reduction of multi-phase radial network,”arXiv preprint arXiv:2403.17391, 2024

  15. [15]

    Learning distribution grid topologies: A tutorial,

    D. Deka, V . Kekatos, and G. Cavraro, “Learning distribution grid topologies: A tutorial,”IEEE T. Smart Grid, vol. 15, no. 1, pp. 999– 1013, 2024

  16. [16]

    The algorithmic foundations of differential privacy,

    C. Dwork and A. Roth, “The algorithmic foundations of differential privacy,”Foundations and Trends® in Theoretical Computer Science, vol. 9, no. 3–4, pp. 211–407, 2014

  17. [17]

    Differentially private synthetic voltage phasor release for distribution grids,

    A. Campbellet al., “Differentially private synthetic voltage phasor release for distribution grids,” 2026

  18. [18]

    Preserving privacy of smart meter data in a smart grid environment,

    M. B. Goughet al., “Preserving privacy of smart meter data in a smart grid environment,”IEEE Transactions on Industrial Informatics, vol. 18, no. 1, pp. 707–718, 2021

  19. [19]

    Solar photovoltaic systems metadata inference and differentially private publication,

    N. Ravi, A. Scaglione, J. Giraldez, P. Pradhan, C. Moran, and S. Peisert, “Solar photovoltaic systems metadata inference and differentially private publication,”arXiv preprint arXiv:2304.03749, 2023

  20. [20]

    Differentially private algorithms for synthetic power system datasets,

    V . Dvorkin and A. Botterud, “Differentially private algorithms for synthetic power system datasets,”IEEE Control Systems Letters, vol. 7, pp. 2053–2058, 2023

  21. [21]

    Differentially private distributed optimal power flow,

    V . Dvorkinet al., “Differentially private distributed optimal power flow,” in2020 59th IEEE Conference on Decision and Control (CDC), 2020, pp. 2092–2097

  22. [22]

    Differentially private optimal power flow for distribution grids,

    ——, “Differentially private optimal power flow for distribution grids,” IEEE Trans. Power Syst., vol. 36, no. 3, pp. 2186–2196, 2021

  23. [23]

    Differential privacy of network parameters from a system identification perspective,

    A. Campbell, A. Scaglione, H. Liu, V . Elvira, S. Peisert, and D. Arnold, “Differential privacy of network parameters from a system identification perspective,” inICASSP 2026 - 2026 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), 2026, pp. 441–445

  24. [24]

    Privacy-preserving convex optimization: When differential privacy meets stochastic programming,

    V . Dvorkin, F. Fioretto, P. Van Hentenryck, P. Pinson, and J. Kazempour, “Privacy-preserving convex optimization: When differential privacy meets stochastic programming,” in2025 IEEE 64th Conference on Decision and Control (CDC). IEEE, 2025, pp. 8149–8156

  25. [25]

    Differential privacy of aggregated dc optimal power flow data,

    F. Zhou, J. Anderson, and S. H. Low, “Differential privacy of aggregated dc optimal power flow data,” in2019 American Control Conference (ACC), 2019, pp. 1307–1314

  26. [26]

    Differential privacy for power grid obfuscation,

    F. Fioretto, T. W. K. Mak, and P. Van Hentenryck, “Differential privacy for power grid obfuscation,”IEEE T. Smart Grid, vol. 11, no. 2, pp. 1356–1366, 2020

  27. [27]

    Synthesizing grid data with cyber resilience and privacy guarantees,

    S. Wu and V . Dvorkin, “Synthesizing grid data with cyber resilience and privacy guarantees,”IEEE Control Systems Letters, vol. 9, pp. 438–443, 2025

  28. [28]

    Differential privacy for net- work identification,

    V . Katewa, A. Chakrabortty, and V . Gupta, “Differential privacy for net- work identification,”IEEE Transactions on Control of Network Systems, vol. 7, no. 1, pp. 266–277, 2020

  29. [29]

    Differential privacy for dynamical sensitive data,

    F. Koufogiannis and G. J. Pappas, “Differential privacy for dynamical sensitive data,” in2017 IEEE 56th Annual Conference on Decision and Control (CDC), 2017, pp. 1118–1125

  30. [30]

    Adjoint sensitivity analysis for differential-algebraic equations: The adjoint dae system and its numerical solution,

    Y . Cao, S. Li, L. Petzold, and R. Serban, “Adjoint sensitivity analysis for differential-algebraic equations: The adjoint dae system and its numerical solution,”SIAM journal on scientific computing, vol. 24, no. 3, pp. 1076–1089, 2003

  31. [31]

    Dynamic study model for the interconnected power system of continental europe in different simulation tools,

    A. Semerow, S. H ¨ohn, M. Luther, W. Sattinger, H. Abildgaard, A. D. Garcia, and G. Giannuzzi, “Dynamic study model for the interconnected power system of continental europe in different simulation tools,” in 2015 IEEE Eindhoven PowerTech. IEEE, 2015, pp. 1–6

  32. [32]

    Identification of physical parameters of a synchronous generator from online measurements,

    M. Karrari and O. Malik, “Identification of physical parameters of a synchronous generator from online measurements,”IEEE transactions on energy conversion, vol. 19, no. 2, pp. 407–415, 2004

  33. [33]

    Power system stabilizers design for intercon- nected power systems,

    G. Gurrala and I. Sen, “Power system stabilizers design for intercon- nected power systems,”IEEE Trans. Power Syst., vol. 25, no. 2, pp. 1042–1051, 2010

  34. [34]

    Modulated os- cillations of synchronous machine nonlinear dynamics with saturation,

    D. Wu, P. V orobev, S. C. Chevalier, and K. Turitsyn, “Modulated os- cillations of synchronous machine nonlinear dynamics with saturation,” IEEE Trans. Power Syst., vol. 35, no. 4, pp. 2915–2925, 2020

  35. [35]

    Distributed automatic load frequency control with optimality in power systems,

    X. Chen, C. Zhao, and N. Li, “Distributed automatic load frequency control with optimality in power systems,”IEEE Transactions on Control of Network Systems, vol. 8, no. 1, pp. 307–318, 2020

  36. [36]

    System inertia cost,

    National Energy System Operator, “System inertia cost,” NESO Data Portal, 2024, accessed: 2024-12-18. [Online]. Available: https: //www.neso.energy/data-portal/system-inertia-cost

  37. [37]

    Public plug-in electric vehicles+ grid data: Is a new cyberattack vector viable?

    S. Acharya, Y . Dvorkin, and R. Karri, “Public plug-in electric vehicles+ grid data: Is a new cyberattack vector viable?”IEEE T. Smart Grid, vol. 11, no. 6, pp. 5099–5113, 2020

  38. [38]

    A. R. Bergen and V . Vittal,Power Systems Analysis, 2nd ed. Upper Saddle River, NJ: Prentice Hall, 2000

  39. [39]

    Local load redistribution attacks in power systems with incomplete network information,

    X. Liu and Z. Li, “Local load redistribution attacks in power systems with incomplete network information,”IEEE T. Smart Grid, vol. 5, no. 4, pp. 1665–1676, Jul. 2014

  40. [40]

    A review of false data injection attacks against modern power systems,

    G. Lianget al., “A review of false data injection attacks against modern power systems,”IEEE T. Smart Grid, vol. 8, pp. 1630–1638, 2016

  41. [41]

    Approximate gauss– newton methods for nonlinear least squares problems,

    S. Gratton, A. S. Lawless, and N. K. Nichols, “Approximate gauss– newton methods for nonlinear least squares problems,”SIAM Journal on Optimization, vol. 18, no. 1, pp. 106–132, 2007