Abstract:Deep learning methods can not only detect false data injection attacks (FDIA) but also locate attacks of FDIA. Although adversarial false data injection attacks (AFDIA) based on deep learning vulnerabilities have been studied in the field of single-label FDIA detection, the adversarial attack and defense against multi-label FDIA locational detection are still not involved. To bridge this gap, this paper first explores the multi-label adversarial example attacks against multi-label FDIA locational detectors and proposes a general multi-label adversarial attack framework, namely muLti-labEl adverSarial falSe data injectiON attack (LESSON). The proposed LESSON attack framework includes three key designs, namely Perturbing State Variables, Tailored Loss Function Design, and Change of Variables, which can help find suitable multi-label adversarial perturbations within the physical constraints to circumvent both Bad Data Detection (BDD) and Neural Attack Location (NAL). Four typical LESSON attacks based on the proposed framework and two dimensions of attack objectives are examined, and the experimental results demonstrate the effectiveness of the proposed attack framework, posing serious and pressing security concerns in smart grids.

What problem does this paper attempt to address?

### What problems does this paper attempt to solve? This paper aims to solve the problem of detection and location of multi - label false data injection attacks (FDIA) in smart grids. Specifically, it proposes a multi - label adversarial attack framework for deep - learning - based multi - label FDIA detectors, named LESSON (muLti - labEl adverSarial falSe data injectiON attack). The following are the specific problems that this paper attempts to solve: 1. **Limitations of existing research**: - Although some studies have explored adversarial false data injection attacks (AFDIA) based on single - label FDIA detection, adversarial attacks and defense methods for multi - label FDIA location detection have not been involved yet. - Although the application of deep - learning models in power systems performs well, it is also vulnerable to the influence of adversarial sample attacks. 2. **New attack threats**: - Adversarial false data injection attacks (AFDIA) can take advantage of the vulnerabilities of deep - learning models to change the power grid state without being detected, thereby achieving specific attack goals. - Adversarial attacks for multi - label FDIA location detection can mislead the neural network attack location (NAL) module, enabling attackers to hide their real attack locations. 3. **Security and reliability**: - Existing adversarial attack and defense methods mainly focus on single - label classification, while multi - label classification adversarial attack methods and defense strategies have not been fully studied. - Explore the methods and characteristics of multi - label adversarial attacks to provide a basis and support for the subsequent design of effective defense measures. ### Main contributions of the paper In order to address the above problems, the paper makes the following main contributions: 1. **Propose the LESSON attack framework**: - Propose a general and multi - functional multi - label adversarial attack framework LESSON, including three key designs: perturbing state variables, customizing loss function design, and variable transformation. - These designs can help find suitable multi - label adversarial perturbations within physical constraints to bypass bad data detection (BDD) and neural attack location (NAL). 2. **Explore four typical LESSON attacks**: - Based on the proposed attack framework and two - dimensional attack goals, explore four typical LESSON attacks (LESSON - 1 to LESSON - 4). - Attack goal one focuses on the induced estimation error, representing the attacker's attempt to influence the power system state estimation results; attack goal two focuses on the location detection results of the multi - label FDIA detector, indicating the attacker's deception ability and the real concealment of the attack. 3. **Experimental analysis and evaluation**: - Conduct extensive experimental analysis to verify the effectiveness of the four LESSON attacks and analyze relevant influencing factors. - The experimental results show that the LESSON attack framework has a high attack success rate, especially in large - scale power systems, posing a great threat to existing multi - label classifiers. Through these contributions, the paper fills the gap in multi - label adversarial attack research and provides an important reference and basis for future security protection.

LESSON: Multi-Label Adversarial False Data Injection Attack for Deep Learning Locational Detection

Attack As Detection: Using Adversarial Attack Methods to Detect Abnormal Examples.

A Fast Locational Detection Model for False Data Injection Attack Based on Edge Computing

Learning-Based Cooperative False Data Injection Attack and Its Mitigation Techniques in Consensus-Based Distributed Estimation

Towards Adversarial-Resilient Deep Neural Networks for False Data Injection Attack Detection in Power Grids

A Reinforcement Learning-Based Detection Method for False Data Injection Attack in Distributed Smart Grid

Joint Adversarial Example and False Data Injection Attacks for State Estimation in Power Systems

Federated Learning Based Distributed Localization of False Data Injection Attacks on Smart Grids

Study of Monitoring False Data Injection Attacks Based on Machine-learning in Electric Systems

Locational Detection of False Data Injection Attack in Smart Grid Based on Multilabel Machine Learning Classification Methods

FLLF: A Fast-Lightweight Location Detection Framework for False Data Injection Attacks in Smart Grids

A Federated Learning Framework for Detecting False Data Injection Attacks in Solar Farms

Detecting False Data Injection Attacks in Smart Grids: A Semi-Supervised Deep Learning Approach

Privacy-preserving federated learning for detecting false data injection attacks on power system

Sparse Adversarial Learning for FDIA Attack Sample Generation in Distributed Smart Grids

False Data Injection Attack Detection Method Based on Deep Learning with Multi-Scale Feature Fusion

A Deep Learning-Based Classification Scheme for False Data Injection Attack Detection in Power System

Topology Learning Aided False Data Injection Attack Without Prior Topology Information

False Data Injection Attack Detection in Edge-based Smart Metering Networks with Federated Learning

Metaheuristics based dimensionality reduction with deep learning driven false data injection attack detection for enhanced network security

Evaluation of Reinforcement Learning-Based False Data Injection Attack to Automatic Voltage Control