The papers they used as evidence, one in Safety Science and one in Nature, are part of a growing reliance on a particular kind of numerical model, a topological model, for understanding complex systems, including the power grid, and that is not good.
Many topological models are, basically, graphs of connected links and nodes that represent the flows and paths within a system. When a node changes or fails, its nearest connected neighbor will often change or fail next. This abstraction has provided profound insights into many complex systems, like river networks, supply chains, and highway traffic.
But electricity is strange and the US electric grid even stranger because of its patchwork nature.
For example, the Safety Science paper came to the "highly counter-intuitive conclusion," says University of Vermont power-system expert Paul Hines, that the smallest, lowest-flow parts of the electrical system -- say a minor substation in a neighborhood -- were likely to be the most effective spots for a targeted attack to bring down the U.S. grid.
"That's a bunch of hooey," says Seth Blumsack of Penn State.
"Some modelers have gotten so fascinated with these abstract networks that they've ignored the physics of how things actually work -- like electricity infrastructure," says Hines, "and this can lead you grossly astray."
With another researcher, they published a paper in Chaos which found just the opposite of what the Safety Science study claimed. Drawing on real-world data from the Eastern U.S. power grid and accounting for the two most important laws of physics governing the flow of electricity, they show that "the most vulnerable locations are the ones that have most flow through them," Hines says. Think highly connected transformers and major power-generating stations. Score one point for common sense.
In August of 2003 a blackout started in Ohio and then spread to New York City. Cleveland went down and soon Toronto was affected. The blackout was able to jump over long distances.
"The way topological cascades typically occur -- is they're more like real dominoes," says Hines, an assistant professor in UVM's College of Engineering and Mathematical Sciences. "When you push a domino the only thing that can fall is the one next to it. Whereas in a power grid you might push one domino and the next one to fall might be a hundred miles away."
That's because, "when a transmission line fails -- instantly, at nearly the speed of light, everything changes. Everything that is connected will change just a little bit," Hines says, "But in ways that are hard to predict."
Which is why he and Blumsack decided to "run a horse race," he says, between topological models and a physics-based one -- applied to the actual arrangement of the North American Eastern Interconnect, the largest portion of the U.S. electric grid.
Using real-world data from a 2005 North American Electric Reliability Corporation test case, they compared how vulnerable parts of the grid appeared in the differing models. The topological measures -- so-called "characteristic path lengths" and "connectivity loss" between nodes -- came up with dramatically different and less accurate results than a model that calculated blackout size driven by the two rules that most influence actual electric transmissions --Ohm's and Kirchhoff's laws.
In other words, the physics horse won. Or, as their paper concludes, "evaluating vulnerability in power networks using purely topological metrics can be misleading," and "results from physics-based models are more realistic and generally more useful for infrastructure risk assessment." Score one for gritty reality.
An important implication of Hines's work, funded by the National Science Foundation, is that electric grid is probably more secure that many people realize -- because it is so unpredictable. This, of course, makes it hard to improve its reliability (in another line of research, Hines has explored why the rate of blackouts in the United States hasn't improved in decades), but the up-side of this fact is that it would be hard for a terrorist to bring large parts of the grid down by attacking just one small part.
"Our system is quite robust to small things failing -- which is very good," he says, "Even hurricanes have trouble taking out power systems. Hurricanes do cause power system failures, but they don't often take out the whole system."
Blumsack agrees. "Our paper confirms that it would be possible for somebody who wanted to do something disruptive to the power grid to do so," he says. "A lot of the infrastructure is out in the open," which does create vulnerability to planned attack. "But if you wanted to black out half of the U.S., it will be much more difficult than some of these earlier models imply," he says.
"If you were a bad guy, there is no obvious thing to do to take out the power system," Hines says. "What we learned from doing the simulations is that if you take out the biggest substation, with the most flow, you get the biggest failure on average. But there were also a number of cases where, even if you took out the biggest one, you don't get much of a blackout."
"It takes an incredible amount of information," he says, "to really figure out how to make the grid fail."
Citation: Paul Hines, Eduardo Cotilla-Sanchez, Seth Blumsack, 'Do topological models provide good information about electricity infrastructure vulnerability?', Chaos 20, 033122 (2010) doi:10.1063/1.3489887