Abstract:Smart grid is confronted with cyberattacks due to the increasing dependence on cyberspace. False data injection attacks (FDIAs) represent a major type of cyberattacks that cannot be detected by the traditional bad data detection (BDD). The majority of existing researches focus on how to detect FDIAs, while little attention has been paid to obtaining the exact attack locations, which are crucial for deploying countermeasures in time. In this paper, we propose a neural network-based approach for online localizing FDIAs in AC power systems. The approach transforms the multi-dimensional time series measurements to their time-frequency and spectral graph representations, to jointly capture the temporal and spatial correlations in the spectral domain. The spectral decomposition could better characterize the latent properties of measurements, such as auto-correlations of a bus and key dependency between buses, which would be poorly represented in the time domain and vertex domain. Specifically, the proposed approach first adopts the short-time Fourier transform (STFT) and a two-channel convolutional neural network (2C-CNN) to model the spectral-temporal correlations. Then the spectral-spatial relationships are modeled with a graph convolutional network (GCN), which combines the nodal admittance matrix and physical property of power systems. The prior physical knowledge further improves our approach’s interpretability and localization performance. We evaluate the effectiveness of our proposed approach with comprehensive case studies on various standard test systems. Numerical results indicate the superiority of our approach over baselines.

Fast Sequence Component Analysis for Attack Detection in Synchrophasor Networks

Deceptive attack detection of control system using multi-scale principal component analysis

Filter-based Detection and Location of Dynamic Load Altering Attack in Power Cyber-Physical Systems

Distributed Attack Detection of Multi-area Power Systems Against False Data Injection Attacks

Attack detection for spoofed synchrophasor measurements using segmentation network

Real-Time Detection of False Data Injection in Smart Grid Networks: An Adaptive CUSUM Method and Analysis

False-Data-Injection-Enabled Network Parameter Modifications in Power Systems: Attack and Detection

A Collaborative Characteristic Event Sequence Based Identification Method for Cyberattacks in Cyber-Physical System

Identification of Successive "Unobservable" Cyber Data Attacks in Power Systems Through Matrix Decomposition

A Stealthy Attack Against Electricity Market Using Independent Component Analysis

A Stream Learning Approach for Real-Time Identification of False Data Injection Attacks in Cyber-Physical Power Systems

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Model-free based Real-time Authentication Framework for Distributed Synchrophasors

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

A PCA-based algorithm for online false data injection and jamming attacks detection in cyber-physical systems

Advancing Cyber-Attack Detection in Power Systems: A Comparative Study of Machine Learning and Graph Neural Network Approaches

Localizing False Data Injection Attacks in Smart Grid: A Spectrum-Based Neural Network Approach

Observer-based Cyber Attack Detection and Isolation in Smart Grids

Cyberattack Detection in Intelligent Grids Using Non-linear Filtering

Abnormal Traffic-Indexed State Estimation: A Cyber-Physical Fusion Approach for Smart Grid Attack Detection

Dynamic State Estimation under Cyber Attacks: A Comparative Study of Kalman Filters and Observers