Abstract:This study introduces the temporal FDI (TFDI) attack and its detection countermeasure. The attack utilises a deep Q network (DQN) algorithm driven by temporal observations and employs long short‐term memory (LSTM) cells to capture time‐series measurements. A countermeasure based on binary classifiers is also introduced, which detects suspicious local measurements to effectively identify TFDI attacks. False data injection (FDI) attacks are serious threats to a cyber‐physical power system (CPPS), which may be launched by a malicious software or virus accessing only the measurements from one substation. This study proposes a novel attack method named the temporal FDI (TFDI) attack. Namely, the virus makes decisions based on temporal observations of the CPPS, and the attack is driven by a deep Q network (DQN) algorithm. As DQN takes vectors of continuous variables as input states, the proposed method is free of the state space explosion problem, which helps the virus to learn the optimal attack strategy efficiently. Moreover, for adopting time‐series measurements as quasi‐dynamic observations, long short‐term memory cells are employed as a layer of the Q network. The TFDI attack enables the virus to discern trends of load variations and enhance the attack's effectiveness. Meanwhile, a countermeasure is also presented to detect the proposed FDI attack. Binary classifiers are trained for each bus to detect suspicious local measurements according to their deviations from system‐state manifolds. When suspicious measurements are spotted frequently, the corresponding bus is believed to be under FDI attacks. Test cases validate the efficacy of the proposed FDI attack method as well as its countermeasure.

A Data Driven Threat-Maximizing False Data Injection Attack Detection Method with Spatio-Temporal Correlation

Spatio-Temporal Correlation-Based False Data Injection Attack Detection Using Deep Convolutional Neural Network

Real-time Detection of False Data Injection Attack Using Residual Prewhitening in Smart Grid Network.

Distributed Attack Detection of Multi-area Power Systems Against False Data Injection Attacks

Real-time Detecting False Data Injection Attacks Based on Spatial and Temporal Correlations

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Study of Monitoring False Data Injection Attacks Based on Machine-learning in Electric Systems

Defense Optimization in Power Systems against False Data Injection Attacks

A Reinforcement Learning-Based Detection Method for False Data Injection Attack in Distributed Smart Grid

Towards Detecting Long-term False Data Injection Attacks: An Entropy-based Approach

A Deep Learning-Based Classification Scheme for False Data Injection Attack Detection in Power System

False Data Injection on State Estimation in Power Systems—Attacks, Impacts, and Defense: A Survey

Differential Evolution-Based Three Stage Dynamic Cyber-Attack of Cyber-Physical Power Systems

False-Data-Injection-Enabled Network Parameter Modifications in Power Systems: Attack and Detection

Temporal false data injection attack and detection on cyber‐physical power system based on deep reinforcement learning

A Detection Based on OMES and MTAD-GAT for False Data Injection Attack in Smart Grid

Enhanced Protection Against False Data Injection By Dynamically Changing Information Structure Of Microgrids

Confidence-aware collaborative detection mechanism for false data attacks in smart grids

Data-Driven Detection of Stealthy False Data Injection Attack Against Power System State Estimation

False data injection attack in smart grid cyber physical system: Issues, challenges, and future direction

False data injection attacks against smart gird state estimation: Construction, detection and defense