Abstract:The emergence of novel the dummy data injection attack (DDIA) poses a severe threat to the secure and stable operation of power systems. These attacks are particularly perilous due to the minimal Euclidean spatial separation between the injected malicious data and legitimate data, rendering their precise detection challenging using conventional distance-based methods. Furthermore, existing research predominantly focuses on various machine learning techniques, often analyzing the temporal data sequences post-attack or relying solely on Euclidean spatial characteristics. Unfortunately, this approach tends to overlook the inherent topological correlations within the non-Euclidean spatial attributes of power grid data, consequently leading to diminished accuracy in attack localization. To address this issue, this study takes a comprehensive approach. Initially, it examines the underlying principles of these new DDIAs on power systems. Here, an intricate mathematical model of the DDIA is designed, accounting for incomplete topological knowledge and alternating current (AC) state estimation from an attacker's perspective. This model aims to mitigate the vulnerabilities associated with direct current (DC) flow-based attack data generation methods that can be readily detected. Subsequently, by integrating a priori knowledge of grid topology and considering the temporal correlations within measurement data and the topology-dependent attributes of the power grid, this study introduces temporal and spatial attention matrices. These matrices adaptively capture the spatio-temporal correlations within the attacks. Leveraging gated stacked causal convolution and graph wavelet sparse convolution, the study jointly extracts spatio-temporal DDIA features. This methodology significantly enhances the dynamic correlation mining capability while improving computational efficiency in the neighborhood. Finally, the research proposes a DDIA localization method based on spatio-temporal graph neural networks, allowing for adaptation to changing power system topologies. The accuracy and effectiveness of the DDIA model are rigorously demonstrated through comprehensive analytical cases. It is unequivocally verified that the proposed localization method rapidly and effectively detects and locates DDIA while exhibiting superior accuracy, robustness, and generalization capabilities.

ADDP: Anomaly Detection for DTU Based on Power Consumption Side-Channel

Real-time Monitoring of Smart Grid Terminals Based on Multi-dimensional Information Fusion

Malicious Code Detection on Smart Meters -A Side-Channel Based Approach

Attack Detection for Distributed Photovoltaic Generation Systems Leveraging Cyber and Power Side Channel Data

Terminal Security Monitoring Based on Power Consumption Information

Power IoT System Security Monitoring Based on Power Consumption Side Channel Information.

Power-Based Non-Intrusive Condition Monitoring for Terminal Device in Smart Grid

Power Consumption-based Anomaly Detection for Relay Protection

Using Power Side-Channel to Implement Anomaly-Based Intrusion Detection on Smart Grid Terminals

Non-intrusive Runtime Monitoring for Power System Intelligent Terminal Based on Improved Deep Belief Networks (I-DBN)

Distributed Attack Detection of Multi-area Power Systems Against False Data Injection Attacks

A Deep Learning based Detection Method for Combined Integrity-Availability Cyber Attacks in Power System

Anomaly Detection for Power Grid Based on Time Series Model

Physical Verification of Data-Driven Cyberattack Detector in Power System: an MTD Approach

Malicious data deception attacks against power systems: A new case and its detection method

Defending Against Adversarial Attacks in Transmission- and Distribution-level PMU Data

Robust Moving Target Defence Against False Data Injection Attacks in Power Grids

On False Data-Injection Attacks Against Power System State Estimation: Modeling and Countermeasures

APT Attack Detection of a New Power System Based on DPI-Transformer

Mode division-based anomaly detection against integrity and availability attacks in industrial cyber-physical systems

Localization of dummy data injection attacks in power systems considering incomplete topological information: A spatio-temporal graph wavelet convolutional neural network approach