A Mission-Centric Cyber-Resilience Benchmark for Silent-Watch Operation of Electrified Ground-Platform Power Architectures

Abstract

Silent-watch operation makes electrified ground platforms depend on supervisory energy management because mission loads must be sustained from stored energy while the engine is off. This paper develops a mission-centric cyber-resilience benchmark for this operating mode. The benchmark connects battery state-of-charge (SOC) spoofing to mission outcomes rather than evaluating the attack only through detector response or control error. It combines a reduced-order DC-bus model, residual-based detection, fallback shedding, and five mission-facing metrics for endurance, critical-load service, priority-weighted loss-of-load cost, unsafe-voltage exposure, and detection delay. The study shows that SOC spoofing creates a structured stealth-versus-impact envelope. Small biases have limited mission effect, intermediate biases produce an endurance deficit well approximated by a first-order expression in bias magnitude, shed power, and average battery draw, and large biases disable the SOC-driven guard. The results also show that defense value depends on fallback depth, not detection alone. An undersized fallback action can leave the Defended case failing to complete the mission despite early detection. MATLAB-to-Simulink parity across five regression scenarios provides a software-verified basis for hardware-in-the-loop testing.